{"vulnerability": "2022-40", "sightings": [{"uuid": "dd18895f-ccff-4075-addf-3ba93400e921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "MISP/01250f9e-7cf9-44b5-b20f-c16f0cca48d6", "content": "", "creation_timestamp": "2023-01-19T13:09:09.000000Z"}, {"uuid": "de171e71-0587-4088-9201-6bd84ed14a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "30ba93dd-6414-40ab-9de7-b509fb53a793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "3d63dccf-ac98-476a-8e66-e578c16f98e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "f222e9f5-d8ff-4841-a532-9aeb703ed6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40005", "type": "seen", "source": "MISP/23306019-6785-40e9-a0d8-c5f4a60998d9", "content": "", "creation_timestamp": "2023-06-29T12:17:33.000000Z"}, {"uuid": "4a47f8ed-b337-456f-bd1c-98b37adae491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40347", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51274", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "d9d1a269-cf4c-4c95-82de-416f9316eca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40032", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51273", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "a7af966d-ddb6-4ad3-a76f-f3a84ea2e1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40732", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676224976008991", "content": "", "creation_timestamp": "2024-12-18T22:38:58.831921Z"}, {"uuid": "533899e8-3a3e-400f-aa09-f64bf6c1e760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40733", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676224990939956", "content": "", "creation_timestamp": "2024-12-18T22:38:59.110925Z"}, {"uuid": "d93d396c-973f-469c-8c97-dbcc2fdafa5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3lfu7nif6i22k", "content": "", "creation_timestamp": "2025-01-16T11:50:35.537333Z"}, {"uuid": "ac5e9863-d7b1-4600-a4cf-a7293891796c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lftcgs2fru2y", "content": "", "creation_timestamp": "2025-01-16T03:07:52.408873Z"}, {"uuid": "7b4496b6-69df-4d8f-9e53-7bd38641c959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971716", "content": "", "creation_timestamp": "2024-12-24T20:33:11.027213Z"}, {"uuid": "ed5d48e6-8c71-486d-b8db-0c0a34727df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971723", "content": "", "creation_timestamp": "2024-12-24T20:33:16.224239Z"}, {"uuid": "c04a9921-da6a-46ce-b9e7-01db11880431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971768", "content": "", "creation_timestamp": "2024-12-24T20:33:49.961340Z"}, {"uuid": "49e58eb6-0334-4b87-893f-00ee914be389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lfufwluvlk2z", "content": "", "creation_timestamp": "2025-01-16T13:43:05.884802Z"}, {"uuid": "d5d9cafd-73ef-4470-94e3-665df18544f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113838486993713906", "content": "", "creation_timestamp": "2025-01-16T14:24:20.905019Z"}, {"uuid": "e0f6b5ae-4a19-47e8-890c-96ac95142ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lfutoo46r22l", "content": "", "creation_timestamp": "2025-01-16T17:49:11.341514Z"}, {"uuid": "efbe292c-04ef-41ce-a73e-34608afda727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-2025cd14-08ad998052c055cd", "content": "", "creation_timestamp": "2025-01-16T17:59:13.682528Z"}, {"uuid": "bf7e5c3f-8833-48cf-ba85-26ef84f56a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/cudeso.bsky.social/post/3lfuncdbn222j", "content": "", "creation_timestamp": "2025-01-16T15:54:56.027783Z"}, {"uuid": "5d20c175-0eeb-4ef5-9ee2-f1c77e7fc989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40684", "type": "confirmed", "source": "https://github.com/cudeso/tools/blob/master/CVE-2022-40684/", "content": "", "creation_timestamp": "2025-01-16T16:03:00.659050Z"}, {"uuid": "476129d0-5e9d-4ae3-8e1c-d8748862fe08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113835343933778715", "content": "", "creation_timestamp": "2025-01-16T01:05:16.851013Z"}, {"uuid": "89cbaa3c-0f48-49cd-b793-09b1bdfb9455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lft3let3h7j2", "content": "", "creation_timestamp": "2025-01-16T01:05:19.457279Z"}, {"uuid": "f0b3f7b3-b16b-436d-985c-b70756c0f3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3lfuotu647m2j", "content": "", "creation_timestamp": "2025-01-16T16:22:35.436297Z"}, {"uuid": "627a7504-1ff0-45ca-9c99-25b781cfa7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113841533161451940", "content": "", "creation_timestamp": "2025-01-17T03:19:01.973643Z"}, {"uuid": "0c20063d-e8ef-48ac-acf7-e2bd30dbd935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfwxnb6pt42r", "content": "", "creation_timestamp": "2025-01-17T14:05:17.587406Z"}, {"uuid": "27b8d554-8263-4df8-97b1-0c270bb56c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lg7mhp4aus2o", "content": "", "creation_timestamp": "2025-01-21T00:39:19.547930Z"}, {"uuid": "4e009563-92cb-499e-86e7-349a60b07dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40443", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5bhdy2x", "content": "", "creation_timestamp": "2025-01-20T21:02:00.221008Z"}, {"uuid": "d7a219c9-6353-49b1-95ee-2879e0618e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40624", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5doee27", "content": "", "creation_timestamp": "2025-01-20T21:02:00.805068Z"}, {"uuid": "20b9ddb9-7c9c-4818-821f-fe7e0dcbd524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40604", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lfzsdzfmqo2v", "content": "", "creation_timestamp": "2025-01-18T17:08:37.776928Z"}, {"uuid": "1b8fa03d-e9fa-44c5-ac13-bf185f67ad12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40443", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-40443.yaml", "content": "", "creation_timestamp": "2025-01-16T09:28:49.000000Z"}, {"uuid": "b9da59fb-b22e-460c-9e7c-a157c494b427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40624", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-40624.yaml", "content": "", "creation_timestamp": "2025-01-16T09:28:22.000000Z"}, {"uuid": "846246a7-dfb5-4997-859a-5f2e16e67860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lg6zphmsjf22", "content": "", "creation_timestamp": "2025-01-20T19:03:36.471340Z"}, {"uuid": "3456df9f-3c40-48a1-b967-b8de96c30140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "content": "", "creation_timestamp": "2025-02-04T00:00:00.000000Z"}, {"uuid": "41e75106-6ae3-4ff3-9937-23cd44a5973e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/s-trobertlaszlo.bsky.social/post/3lhkzuzpcdk2b", "content": "", "creation_timestamp": "2025-02-07T07:03:52.568073Z"}, {"uuid": "b87861bf-c77b-4b84-a3e5-7d36cf6d55e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "content": "", "creation_timestamp": "2025-01-30T00:00:00.000000Z"}, {"uuid": "317b841c-2e96-454b-9dfc-e08f997b8937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/treadstone71.bsky.social/post/3lgejjkweqh2v", "content": "", "creation_timestamp": "2025-01-22T23:29:57.244019Z"}, {"uuid": "1c5c0c44-9964-4fbf-bbcb-39da14afc333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/treadstone71.bsky.social/post/3lgejkdgqyp24", "content": "", "creation_timestamp": "2025-01-22T23:30:22.711032Z"}, {"uuid": "2bca0e12-e5f1-4dc6-826a-830d2050c3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "efd629c0-a842-4968-bd0f-a2016f615442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "68df7a28-f426-4b0e-a0c0-65426d2c0ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlmpaxhs2s", "content": "", "creation_timestamp": "2025-02-06T17:16:00.651684Z"}, {"uuid": "e69e6a72-77ba-4f1c-9de9-9d4423a782f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lgtas4igas2o", "content": "", "creation_timestamp": "2025-01-28T20:03:40.060959Z"}, {"uuid": "a35a8c44-6e5a-49fc-9b75-1fcf2de07912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlms7cys2s", "content": "", "creation_timestamp": "2025-02-06T17:16:03.164650Z"}, {"uuid": "1187cbd2-e7d6-46c4-a616-e60febded5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "content": "", "creation_timestamp": "2025-02-06T00:00:00.000000Z"}, {"uuid": "da66e50b-04ed-4ce6-a25f-a5adf936e0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-23)", "content": "", "creation_timestamp": "2025-01-23T00:00:00.000000Z"}, {"uuid": "901a97f2-8038-4de4-8183-3eab742a2465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-24)", "content": "", "creation_timestamp": "2025-01-24T00:00:00.000000Z"}, {"uuid": "5eb37a32-28ee-4e0d-a9de-2ca71d9f6fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "c167d0a4-d810-4303-aed3-79f205ec50a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "content": "", "creation_timestamp": "2025-01-23T00:00:00.000000Z"}, {"uuid": "a863276e-3f7e-4521-b379-58b2cadbacae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-15)", "content": "", "creation_timestamp": "2025-01-15T00:00:00.000000Z"}, {"uuid": "3f3bdf0e-57d0-4a50-86d8-711f0b6b4d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-16)", "content": "", "creation_timestamp": "2025-01-16T00:00:00.000000Z"}, {"uuid": "967c4cbe-bb41-4ef6-8e14-28e0c3eebacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-22)", "content": "", "creation_timestamp": "2025-01-22T00:00:00.000000Z"}, {"uuid": "3f93a85c-8e96-427d-84df-50e02df616c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-18)", "content": "", "creation_timestamp": "2025-01-18T00:00:00.000000Z"}, {"uuid": "c00c031f-87be-4f90-a08e-6b972839c5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "content": "", "creation_timestamp": "2024-12-26T00:00:00.000000Z"}, {"uuid": "98d7bc3d-edf9-4885-bf1b-abba00b1fcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "content": "", "creation_timestamp": "2024-12-31T00:00:00.000000Z"}, {"uuid": "a12ea8ea-1342-4028-857e-98dca5063c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "content": "", "creation_timestamp": "2024-12-27T00:00:00.000000Z"}, {"uuid": "888fce84-b9b2-4a6e-bd50-fb4a1d4ff454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-22)", "content": "", "creation_timestamp": "2025-01-22T00:00:00.000000Z"}, {"uuid": "32ab4bcf-b70e-4481-8db2-eaa710e22db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-04)", "content": "", "creation_timestamp": "2025-01-04T00:00:00.000000Z"}, {"uuid": "6a9caae6-c914-44bb-bae5-8f8356e0d8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-05)", "content": "", "creation_timestamp": "2025-01-05T00:00:00.000000Z"}, {"uuid": "37cb0599-4dd1-473c-b41f-8dafeb3f5020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgtbo2a7rer2", "content": "", "creation_timestamp": "2025-01-28T20:19:41.263965Z"}, {"uuid": "025e06b2-dea9-441d-94be-5f25c75eab6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "content": "", "creation_timestamp": "2025-01-01T00:00:00.000000Z"}, {"uuid": "9dccdc4f-1072-4dd1-a8e0-8ba8d01e2f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-09)", "content": "", "creation_timestamp": "2025-01-09T00:00:00.000000Z"}, {"uuid": "43a2a665-d0d3-4822-8785-71bf428d4a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-10)", "content": "", "creation_timestamp": "2025-01-10T00:00:00.000000Z"}, {"uuid": "7b523ce8-6d58-4a7e-9a35-629b4e83921b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-08)", "content": "", "creation_timestamp": "2025-01-08T00:00:00.000000Z"}, {"uuid": "1417fead-db8f-4f99-882c-fcb2bec3f098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "content": "", "creation_timestamp": "2024-10-25T00:00:00.000000Z"}, {"uuid": "28cd3c9a-7bc3-4a7a-a849-bf1eaae2ae65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-26)", "content": "", "creation_timestamp": "2024-10-26T00:00:00.000000Z"}, {"uuid": "a8e61533-850e-476b-b6da-489e0d92955e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "2db37675-9e77-43b9-95c7-937861ea558a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-29)", "content": "", "creation_timestamp": "2024-10-29T00:00:00.000000Z"}, {"uuid": "5c7aa5c7-dc88-490c-831e-8a1b4dc14fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-30)", "content": "", "creation_timestamp": "2024-10-30T00:00:00.000000Z"}, {"uuid": "8fcd2d98-18c1-4436-b310-dd8f9fd027b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-04)", "content": "", "creation_timestamp": "2024-11-04T00:00:00.000000Z"}, {"uuid": "baa7aaf0-509e-424e-9c44-4d3e01544c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-08)", "content": "", "creation_timestamp": "2024-11-08T00:00:00.000000Z"}, {"uuid": "55bfaae3-71b0-4f33-a44a-c4f2de28f0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "7d42011b-eb35-432f-a15c-e36729c11f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-12)", "content": "", "creation_timestamp": "2024-11-12T00:00:00.000000Z"}, {"uuid": "e20d9d63-5c66-4d1b-83bc-3ad3c505f2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-25)", "content": "", "creation_timestamp": "2025-01-25T00:00:00.000000Z"}, {"uuid": "784678ae-8013-4a36-ad88-eb93f57d7efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-19)", "content": "", "creation_timestamp": "2024-11-19T00:00:00.000000Z"}, {"uuid": "aaeb1b59-9715-4696-9db1-0f236e31404c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-26)", "content": "", "creation_timestamp": "2024-11-26T00:00:00.000000Z"}, {"uuid": "10ee0324-223e-43ba-89e4-a7cdb62c43ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-27)", "content": "", "creation_timestamp": "2024-11-27T00:00:00.000000Z"}, {"uuid": "22891a52-fe72-411d-a582-097b9be765a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-29)", "content": "", "creation_timestamp": "2024-11-29T00:00:00.000000Z"}, {"uuid": "cbffcbd0-d28b-4513-bb98-84b0abd608cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "dd9dde87-4551-4258-aaa1-81086d89c51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "983d192a-a945-4da8-bf9e-5a84f9d82d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-04)", "content": "", "creation_timestamp": "2024-12-04T00:00:00.000000Z"}, {"uuid": "de91d031-690b-4f98-ad15-3c0929b46469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "1acbd19f-433e-4be8-a068-74820c31ae3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-03)", "content": "", "creation_timestamp": "2024-12-03T00:00:00.000000Z"}, {"uuid": "6bde229f-8ad2-41e5-90ad-c647eb0481ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "8d39254b-4dcc-4633-970f-2a4fd38bb18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-05)", "content": "", "creation_timestamp": "2024-12-05T00:00:00.000000Z"}, {"uuid": "093bfe46-dc81-4237-84b9-75a580c64195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-10)", "content": "", "creation_timestamp": "2024-12-10T00:00:00.000000Z"}, {"uuid": "eed16566-d408-489b-8a12-dc42395af042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-06)", "content": "", "creation_timestamp": "2024-12-06T00:00:00.000000Z"}, {"uuid": "13127a82-e7a3-4f72-b403-1b66f0b75288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-11)", "content": "", "creation_timestamp": "2024-12-11T00:00:00.000000Z"}, {"uuid": "ac87af6e-cd41-4d57-9136-776098cb5b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-13)", "content": "", "creation_timestamp": "2024-12-13T00:00:00.000000Z"}, {"uuid": "e26dc5c0-4d0b-47ed-b0b7-7167fb7b3a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-21)", "content": "", "creation_timestamp": "2024-12-21T00:00:00.000000Z"}, {"uuid": "fea12480-43d1-4b67-8dbf-25de4e9cf11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "content": "", "creation_timestamp": "2025-02-06T00:00:00.000000Z"}, {"uuid": "98064b3c-ea08-4297-8164-9089ede4c955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-06)", "content": "", "creation_timestamp": "2025-02-06T00:00:00.000000Z"}, {"uuid": "b472d6e5-5295-454e-9503-4b546feee433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957939408750925", "content": "", "creation_timestamp": "2025-02-06T16:42:39.913901Z"}, {"uuid": "a46c8518-625c-4c48-98dd-ff623e497218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-17)", "content": "", "creation_timestamp": "2024-12-17T00:00:00.000000Z"}, {"uuid": "83357e1d-9e59-4a6d-9d95-9d3251023a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957939424564643", "content": "", "creation_timestamp": "2025-02-06T16:42:40.339112Z"}, {"uuid": "e6d469f0-a460-4755-9382-c99745ded91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-18)", "content": "", "creation_timestamp": "2024-12-18T00:00:00.000000Z"}, {"uuid": "8baab8c9-33f2-48b3-a00f-d145077e06b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-02)", "content": "", "creation_timestamp": "2025-01-02T00:00:00.000000Z"}, {"uuid": "31eb5475-f920-4d37-b66a-44f288b50a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-15)", "content": "", "creation_timestamp": "2025-01-15T00:00:00.000000Z"}, {"uuid": "aa8a13e3-20ef-4fb9-9a8b-cf1d0f9866d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-13)", "content": "", "creation_timestamp": "2025-01-13T00:00:00.000000Z"}, {"uuid": "bd27d82c-a041-4806-b342-c70277a06a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://ioc.exchange/users/sicert/statuses/113879199829746014", "content": "", "creation_timestamp": "2025-01-23T18:58:10.205848Z"}, {"uuid": "c784c9df-0587-4e68-a199-99cb6cd08274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "834dd98a-25f9-48c0-9c10-3446d5d18c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-14)", "content": "", "creation_timestamp": "2025-01-14T00:00:00.000000Z"}, {"uuid": "c8b047bd-1454-43dc-b4d8-fa34fa0ec01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-16)", "content": "", "creation_timestamp": "2025-01-16T00:00:00.000000Z"}, {"uuid": "c910ee57-e27d-4f76-9d81-d3937ee89402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "50ec8a2c-2c90-46c6-8cc0-ffb1280f7e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-04)", "content": "", "creation_timestamp": "2025-02-04T00:00:00.000000Z"}, {"uuid": "6dd19be5-a298-4a65-b74c-846840ffc48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "b17507f4-4b5d-427d-9592-f07b90ac76f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-18)", "content": "", "creation_timestamp": "2025-01-18T00:00:00.000000Z"}, {"uuid": "da2d53ba-2235-4738-a4ef-c930d19180c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-04)", "content": "", "creation_timestamp": "2024-11-04T00:00:00.000000Z"}, {"uuid": "bfbceb49-49ef-4a79-8cd3-6f02bba976a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "6694f47a-c08d-42fd-8198-ca999753851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-05)", "content": "", "creation_timestamp": "2024-11-05T00:00:00.000000Z"}, {"uuid": "2d4a24b2-c051-4bf1-9978-ec0c173386cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "0b1a69dd-6d2f-40d7-8cfc-45ca40ccf76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "b1909b7a-bc69-4d7b-9fd0-81aad6a8051f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-07)", "content": "", "creation_timestamp": "2025-02-07T00:00:00.000000Z"}, {"uuid": "d1c83f3b-5e25-4469-87ed-53d637efe3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-05)", "content": "", "creation_timestamp": "2025-03-05T00:00:00.000000Z"}, {"uuid": "f17284f9-6d19-48e1-a75e-4428f11deac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "content": "", "creation_timestamp": "2025-02-07T00:00:00.000000Z"}, {"uuid": "fcd836e3-7f46-479a-81f3-6eca59a9e441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114183697508254377", "content": "", "creation_timestamp": "2025-03-18T13:35:55.653577Z"}, {"uuid": "ba29dd8f-7a4f-4133-8a84-444826649a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:48.000000Z"}, {"uuid": "8eead67c-1299-46a1-aa0d-a8796fd05eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "599e7a18-259f-453d-8627-d4f23474979f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "content": "", "creation_timestamp": "2025-03-23T00:00:00.000000Z"}, {"uuid": "800e1fe1-0b14-4364-a1e2-d97069bdb6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "b1182b0b-d828-4b27-972a-cfc90031e792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "52cd9bf1-9214-424f-96ce-78fdcdb62ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "a7e53072-d2fa-4888-8e39-662265be56a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "dd932272-9222-4520-8ef6-f62b8c1f8070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:48.000000Z"}, {"uuid": "77a71353-5034-4db1-aceb-51a7c65d8056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:48.000000Z"}, {"uuid": "321a9b20-6444-45e6-ad20-6583a0d26525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "89653df7-8451-404a-95e9-8d36ccb0923b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "content": "", "creation_timestamp": "2025-03-26T00:00:00.000000Z"}, {"uuid": "98e7b24c-bccc-47bf-83a7-5c492b95386a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "d6becf3a-4f35-4075-a27e-d6fb162817b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "c893beb1-d20c-4554-96bf-a1f4ec8dfa12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "590faa83-9d00-49a1-a8cb-769300d4f51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "5412310e-2a61-4334-9811-77cab91285d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40304", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "c07a0211-b307-4418-822f-d7d86701bcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "content": "", "creation_timestamp": "2025-03-18T00:00:00.000000Z"}, {"uuid": "aaa696d8-a055-418e-acb1-96b498db34cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "be2a241b-8f2a-4b4f-ac06-115bbc52fe19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-10)", "content": "", "creation_timestamp": "2025-03-10T00:00:00.000000Z"}, {"uuid": "f7b4d5fc-9ab3-4ae9-98d7-19cad3fd9c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "content": "", "creation_timestamp": "2025-02-26T00:00:00.000000Z"}, {"uuid": "3910ae63-4334-4215-adae-acacf51d3668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-13)", "content": "", "creation_timestamp": "2025-02-13T00:00:00.000000Z"}, {"uuid": "ad98dd13-1360-4e39-8ffe-b12d74f81deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-16)", "content": "", "creation_timestamp": "2025-03-16T00:00:00.000000Z"}, {"uuid": "e57b77fb-8322-46ec-b6ac-590ea797be9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "e98d883d-232e-4bf7-98d6-55bf28a6c42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "content": "", "creation_timestamp": "2025-02-13T00:00:00.000000Z"}, {"uuid": "1cfdefae-fa1e-4f6c-876e-73dd6372326f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-22)", "content": "", "creation_timestamp": "2025-03-22T00:00:00.000000Z"}, {"uuid": "e4652a01-3fa3-4229-8967-580d3afa91fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "fc57dabf-b5e0-49db-9a7b-4c7e7345fb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "52bae710-f5c4-4abc-8509-927bb8edb70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://swecyb.com/users/nopatience/statuses/114182151088002586", "content": "", "creation_timestamp": "2025-03-18T07:02:49.100641Z"}, {"uuid": "952bc125-f605-41c9-a8de-061a218f1794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "content": "", "creation_timestamp": "2025-03-16T00:00:00.000000Z"}, {"uuid": "247f81c4-edc1-4089-9830-758c70a0c080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "0eeb76b2-e3d9-473e-a4cb-bf20b9d9dde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "2e232108-02cf-48f3-977d-50a08a4bef56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "content": "", "creation_timestamp": "2025-02-16T00:00:00.000000Z"}, {"uuid": "fec575b7-b304-4f9c-be27-a0d158f596ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "content": "", "creation_timestamp": "2025-02-16T00:00:00.000000Z"}, {"uuid": "26707b29-64bf-4e64-bfcc-2961979928a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "0415c0f4-0067-4fc9-a905-be21246a0462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-19)", "content": "", "creation_timestamp": "2025-03-19T00:00:00.000000Z"}, {"uuid": "a5f72b84-d074-4db5-a23e-4b1b597f1aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-11)", "content": "", "creation_timestamp": "2025-03-11T00:00:00.000000Z"}, {"uuid": "2398cc57-7b56-44f8-82c0-69b2907cd7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-19)", "content": "", "creation_timestamp": "2025-02-19T00:00:00.000000Z"}, {"uuid": "6a264c2e-5814-466e-ba0d-9a6724a3bfd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "content": "", "creation_timestamp": "2025-03-20T00:00:00.000000Z"}, {"uuid": "6a159b80-b5c8-4c0e-8b5c-abc5d0f7e910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-20)", "content": "", "creation_timestamp": "2025-02-20T00:00:00.000000Z"}, {"uuid": "2732d93b-1af5-4604-a3a3-b7cad706a00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-23)", "content": "", "creation_timestamp": "2025-03-23T00:00:00.000000Z"}, {"uuid": "e7c627fa-5797-4005-90e0-81a8e2225849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:38.000000Z"}, {"uuid": "3affd0af-35d5-4a0d-84d4-b6992b7d6f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:38.000000Z"}, {"uuid": "7f8357cf-d197-43a8-a494-677061650eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:38.000000Z"}, {"uuid": "3405a8a0-72da-4203-b388-20fcf42ae956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "5d457dd8-c675-46de-9f5a-88af3978302a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "6be59281-5d56-48d8-91e8-2bfad61feb30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "content": "", "creation_timestamp": "2025-03-22T00:00:00.000000Z"}, {"uuid": "5740de78-bd7f-4ac4-8e30-50f02309f41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-25)", "content": "", "creation_timestamp": "2025-02-25T00:00:00.000000Z"}, {"uuid": "e5722f3b-33a0-4e1c-9b9f-1ce0e1020a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-01)", "content": "", "creation_timestamp": "2025-03-01T00:00:00.000000Z"}, {"uuid": "2317518d-72f5-4bf2-a40e-2cbc7bc04079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "1fe7d547-4b3b-4898-a72e-6f55cde730c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-05)", "content": "", "creation_timestamp": "2025-03-05T00:00:00.000000Z"}, {"uuid": "7765b9d5-eec5-422f-ab2e-07d07ae6027c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "600a1841-38bf-4751-bcd6-624f8100e0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "content": "", "creation_timestamp": "2025-02-25T00:00:00.000000Z"}, {"uuid": "1330719a-9b56-459e-921a-12d922c26f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "6e0114f6-cd47-4fdf-809a-ac6fc54a3274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "1a651396-70d0-4a16-a0da-9dc77a044348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "f434da44-26ea-4435-93ab-53016cf37f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "content": "", "creation_timestamp": "2025-03-31T00:00:00.000000Z"}, {"uuid": "92f1dd21-09c8-4830-b4cb-3b8a701034c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-29)", "content": "", "creation_timestamp": "2025-03-29T00:00:00.000000Z"}, {"uuid": "e7343552-6864-4293-adb7-622eef419939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "content": "", "creation_timestamp": "2025-04-01T00:00:00.000000Z"}, {"uuid": "8109a97e-94e5-410a-a5cf-d3d36ed431bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "content": "", "creation_timestamp": "2025-04-02T00:00:00.000000Z"}, {"uuid": "74a54b0e-645b-4747-942d-7ef5d7a5de1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "f2d4ad62-955a-45fa-b565-6077c378db1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "content": "", "creation_timestamp": "2025-07-11T00:00:00.000000Z"}, {"uuid": "b0ff8244-0eda-44ca-9072-4c23ebe7fc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-03", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "c6d10afb-03f0-446f-95e9-712fe0d0b787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "008d00d5-263c-4530-877d-a9052175ab44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "840235a2-3277-49c2-acb4-640b998ba6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "b3e03cd9-7280-4793-b49f-2bfa2515d11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "c89ea14a-55f1-4759-9dd4-faaf091584ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "dbe9d742-702e-4d31-a7b2-bf5bf7ca6a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-23)", "content": "", "creation_timestamp": "2025-05-23T00:00:00.000000Z"}, {"uuid": "7a95e3ba-7923-41ca-bd86-f6751f475965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "d5143ded-47a7-42d3-bd20-744ae611d700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "71718d55-a452-40fc-bf02-722f35bb7d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-07)", "content": "", "creation_timestamp": "2025-06-07T00:00:00.000000Z"}, {"uuid": "d7c56ae4-fd30-4a9b-98f5-ac86f30c38be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqazn5vm7w2w", "content": "", "creation_timestamp": "2025-05-28T20:19:35.080811Z"}, {"uuid": "4ec31540-b4e2-47ff-b07d-0703645a7066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "b0fff1c5-e522-4f4a-8911-4a9c8587678f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "05db0f54-fabf-4159-98e6-225c8323f64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "01960f5b-ab9a-49bf-8057-259f33b7b834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "content": "", "creation_timestamp": "2025-04-09T00:00:00.000000Z"}, {"uuid": "a795323a-a395-4a3e-8df0-c62c80a4e978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "content": "", "creation_timestamp": "2025-04-10T00:00:00.000000Z"}, {"uuid": "93ca8f6f-d125-4942-84df-b4b1ffba573d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "e7a0ba25-4474-47ad-bdb9-76a18707c283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-13)", "content": "", "creation_timestamp": "2025-04-13T00:00:00.000000Z"}, {"uuid": "002ab16d-eda8-4c1e-9fae-2f42db445e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-13)", "content": "", "creation_timestamp": "2025-06-13T00:00:00.000000Z"}, {"uuid": "c12a97a3-9077-45bd-8aad-5a689870b770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "6a77b128-9413-4cd6-9084-d9d9a29ea053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "19327bad-efda-41c8-bbd6-ce576c8940b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-21)", "content": "", "creation_timestamp": "2025-05-21T00:00:00.000000Z"}, {"uuid": "96e03c2f-64bc-41bf-af09-bdc6f7dad240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "f7a88efd-bcfe-432c-a9c6-740a7754754a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "8704b749-9565-4fdd-ad64-1ba856f1bf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "aaeabc90-5438-4e4b-b909-a39886d69a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmwbsqqo4p2b", "content": "", "creation_timestamp": "2025-04-16T09:31:00.966212Z"}, {"uuid": "44b5e111-791e-42c2-b824-083634bc996e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "cafb8bde-82e0-4b9c-98c8-3666aa8d86e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-28)", "content": "", "creation_timestamp": "2025-05-28T00:00:00.000000Z"}, {"uuid": "3f7d3cdf-f7e7-4f4a-b632-3e6615e3bfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "13b7a86c-9496-4ae5-94c5-9cc7277d3c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "content": "", "creation_timestamp": "2025-05-21T00:00:00.000000Z"}, {"uuid": "9bbbf791-6cf4-4c64-b0fa-396b3ce630d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "00f8ce43-11b4-4828-bc5e-9a8a88869b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "dd3b3523-6f56-4f82-bf63-e2a999c1dbe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-19)", "content": "", "creation_timestamp": "2025-06-19T00:00:00.000000Z"}, {"uuid": "5b6fd278-6436-471e-843c-c07e10e701c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "5dc5b5ac-6e44-441c-8c51-87a2d35e9517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-17)", "content": "", "creation_timestamp": "2025-04-17T00:00:00.000000Z"}, {"uuid": "8fb9711f-6f42-450f-860b-19e7959d8ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-17)", "content": "", "creation_timestamp": "2025-04-17T00:00:00.000000Z"}, {"uuid": "0e7e3b90-69a1-4aba-b81f-e7a1cc194ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-03)", "content": "", "creation_timestamp": "2025-07-03T00:00:00.000000Z"}, {"uuid": "f7f4c407-1d57-491c-8002-c2e083610e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-18)", "content": "", "creation_timestamp": "2025-04-18T00:00:00.000000Z"}, {"uuid": "2feba497-a464-469f-9468-3af978370780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-19)", "content": "", "creation_timestamp": "2025-04-19T00:00:00.000000Z"}, {"uuid": "7a96c3b9-01aa-4015-b071-99098f7c32be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "content": "", "creation_timestamp": "2025-05-28T00:00:00.000000Z"}, {"uuid": "db684ff9-d89b-4d62-b0d8-1b9a8d07b992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "70ac83ef-07da-4d9b-8e51-372449625312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "content": "", "creation_timestamp": "2025-06-19T00:00:00.000000Z"}, {"uuid": "3be68b79-db37-49f7-8441-fe5749b1db09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "64627e03-c1eb-4c37-a717-e0d2b8c82308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "88d91253-a912-4d60-8d23-1abea9af5090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-16)", "content": "", "creation_timestamp": "2025-06-16T00:00:00.000000Z"}, {"uuid": "8e76abc6-0f31-4d9f-bb44-1d4ccd99ae02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-10)", "content": "", "creation_timestamp": "2025-07-10T00:00:00.000000Z"}, {"uuid": "119d2b81-e93e-4c93-84b7-ccc448f82e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-08)", "content": "", "creation_timestamp": "2025-06-08T00:00:00.000000Z"}, {"uuid": "28d91fe3-2a37-421d-abe4-5ff7841768e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-16)", "content": "", "creation_timestamp": "2025-05-16T00:00:00.000000Z"}, {"uuid": "bb3f66ba-2e3a-4d6d-b732-799cdaf6160a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-04", "content": "", "creation_timestamp": "2025-04-22T10:00:00.000000Z"}, {"uuid": "53abb295-2c44-4e30-b267-74f4cd7bcb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "c4f1a261-7b49-4216-ab68-75be18c1c7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "b6cab502-ed19-427d-9f22-f92b8afecead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "d018be3a-8f1b-4767-a69a-b0fc80916be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "content": "", "creation_timestamp": "2025-07-03T00:00:00.000000Z"}, {"uuid": "ed703fd4-31c1-48c4-8e00-21561b4b98d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "9598b550-03b1-4dc0-a8ea-d5841a06646c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "44c0276c-a221-46e5-bcea-5dca690f566b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "e3e4d48a-d2bb-49e5-8f3c-2a33e2938380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-25)", "content": "", "creation_timestamp": "2025-04-25T00:00:00.000000Z"}, {"uuid": "a3654018-1196-45ae-aa8f-9f4337bfa6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "c5560588-befe-4c2f-8112-3c153d46ddc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-25)", "content": "", "creation_timestamp": "2025-04-25T00:00:00.000000Z"}, {"uuid": "3c116912-e396-40b5-a416-e64789d1308b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-27)", "content": "", "creation_timestamp": "2025-04-27T00:00:00.000000Z"}, {"uuid": "d4b1f464-e296-48ee-b3e2-d18de6bee975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-10)", "content": "", "creation_timestamp": "2025-07-10T00:00:00.000000Z"}, {"uuid": "b83d5bd0-870a-4343-a932-49c7bc71841d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-09)", "content": "", "creation_timestamp": "2025-07-09T00:00:00.000000Z"}, {"uuid": "3daade0a-065e-497f-b98c-8da005d66744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lnvs75omuy22", "content": "", "creation_timestamp": "2025-04-28T22:23:37.426729Z"}, {"uuid": "3f5eb45f-66e8-456b-9528-88106c0811d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "9f50e8dd-1d62-4342-ac37-dc32a2329c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-23)", "content": "", "creation_timestamp": "2025-06-23T00:00:00.000000Z"}, {"uuid": "223eb9aa-32e6-47d0-aea2-4ec4227ab5f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-10)", "content": "", "creation_timestamp": "2025-06-10T00:00:00.000000Z"}, {"uuid": "5d871868-237e-42f3-ac3b-bd8a154577fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "99ade6a4-3bfa-4be7-bd1b-ae83894b3906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "7fd42824-2505-47bb-a5a1-82a13ee80b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-25)", "content": "", "creation_timestamp": "2025-06-25T00:00:00.000000Z"}, {"uuid": "6dc5f7c7-e85e-4f1a-949b-30560491a6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "739b3bde-a112-40af-9028-83c1dcac80b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "c4c546c4-424d-4ee2-bd3c-d18ca00757b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "1b0ba455-a3dc-44e0-9f8d-f072508c427f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "85a48d9f-1759-46b5-8125-730f07317a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "57699206-67aa-4900-b282-21da3468be50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "10294c21-f39a-4d26-adca-f36b76dc820d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "8d64a5f3-9fc9-4e0a-9638-d10a34a9b0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "545ee105-5e52-4d63-a9fb-14d36c106731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "121ddb80-7c1c-44d2-b080-0d132593a554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "d53750c6-ae60-421e-8909-7ffe94594cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "b3f69ec9-6d1a-4fbe-b876-d6b24f95b465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-02)", "content": "", "creation_timestamp": "2025-07-02T00:00:00.000000Z"}, {"uuid": "c6f1d081-cde5-4b6b-a367-18261f10571a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "035e1866-8aea-419f-8d3d-00973a2e258d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-05)", "content": "", "creation_timestamp": "2025-05-05T00:00:00.000000Z"}, {"uuid": "fe2f0d02-c77b-4912-afd1-8d8624f5afe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "5ab3d18e-0d95-4904-a9fa-8f489d652bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "9213359e-6968-4646-aae6-d516c6574b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "content": "", "creation_timestamp": "2025-05-05T00:00:00.000000Z"}, {"uuid": "0f954482-361a-4d11-9931-50dbbf62e27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "cbfc570f-764e-4796-9866-720c123c2a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "4bd537dd-2ed1-4e8c-b98f-6bac127e57f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "38410314-13f3-4553-baf8-05cf9e46d217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "f95901c4-7a29-41f4-9111-01bd045e6f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-02)", "content": "", "creation_timestamp": "2025-07-02T00:00:00.000000Z"}, {"uuid": "daea6c19-15fb-4ad1-9a94-45df74190b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "content": "", "creation_timestamp": "2025-06-29T00:00:00.000000Z"}, {"uuid": "c08f8b12-574f-450f-a99c-f05a6c5e4367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "ba7a45f1-6ee3-45dc-bdd4-0792bafff13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "4c6ac511-293b-45a3-8f12-0dc52b801429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-25)", "content": "", "creation_timestamp": "2025-06-25T00:00:00.000000Z"}, {"uuid": "6a93832d-0fd2-49a7-9628-6e58a1347919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-08)", "content": "", "creation_timestamp": "2025-07-08T00:00:00.000000Z"}, {"uuid": "b9c08e80-21cf-40d5-90b9-77d7b922fd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "content": "", "creation_timestamp": "2025-05-08T00:00:00.000000Z"}, {"uuid": "a44c79df-4dd0-4667-b039-cb52f0cbb006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "content": "", "creation_timestamp": "2025-05-08T00:00:00.000000Z"}, {"uuid": "cc1afdda-914d-4ae1-82b3-226e834f06a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-09)", "content": "", "creation_timestamp": "2025-05-09T00:00:00.000000Z"}, {"uuid": "6eb90c56-c9b4-4186-a5e9-2c182b4eb779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "content": "", "creation_timestamp": "2025-05-09T00:00:00.000000Z"}, {"uuid": "a90b645c-3f71-4a44-a64c-a783b7770112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-27)", "content": "", "creation_timestamp": "2025-06-27T00:00:00.000000Z"}, {"uuid": "01c581f4-26ab-49c4-85ac-3fa3c6b68135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "content": "", "creation_timestamp": "2025-05-10T00:00:00.000000Z"}, {"uuid": "f69e94b7-3f9f-4064-8a5b-d6009cfc83bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "1859bd84-6246-48f5-ba07-4d7df48f9414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "afa8913d-2c7e-4ab4-80fe-6a5e8e2d0d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "2e658d4d-baa9-4ae3-8d41-2e67643ffe7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "content": "", "creation_timestamp": "2025-06-15T00:00:00.000000Z"}, {"uuid": "ee6c13d0-4c35-41a2-9619-1f6654fe91e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "fc55cc7a-a1c5-4dac-a701-295a948dde48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-20)", "content": "", "creation_timestamp": "2025-05-20T00:00:00.000000Z"}, {"uuid": "d6c8715e-dc08-4688-b29b-3b784327c7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-04)", "content": "", "creation_timestamp": "2025-06-04T00:00:00.000000Z"}, {"uuid": "9ba14fd3-16dd-47e1-a2e2-7419b62d3638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "8a8ca426-ec6d-455e-a3cc-7edc732e21b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-29)", "content": "", "creation_timestamp": "2025-05-29T00:00:00.000000Z"}, {"uuid": "b9053f4b-d128-4534-afec-e1bc73845240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "02e14917-b282-4c22-9981-1b1c89524c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-29)", "content": "", "creation_timestamp": "2025-05-29T00:00:00.000000Z"}, {"uuid": "ca39c8f8-7b92-48a4-9c85-b84d099c2b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40769", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lswluwxsjp27", "content": "", "creation_timestamp": "2025-07-01T21:02:22.332873Z"}, {"uuid": "c31374fc-e10e-4c8d-a46a-8198574c8c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-04)", "content": "", "creation_timestamp": "2025-06-04T00:00:00.000000Z"}, {"uuid": "9b705399-0e73-488a-8ec6-888535ab9130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-09)", "content": "", "creation_timestamp": "2025-06-09T00:00:00.000000Z"}, {"uuid": "ddc884b9-f53d-421b-9f72-8d3d47cbc0c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-13)", "content": "", "creation_timestamp": "2025-05-13T00:00:00.000000Z"}, {"uuid": "e3ca3dfc-4b8e-4da4-b001-6f96d019c746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "e7aba3ed-afd7-467b-a191-dd9d7584b5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "content": "", "creation_timestamp": "2025-06-27T00:00:00.000000Z"}, {"uuid": "f190d2f3-7321-4e11-838f-47643f5eb3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-14)", "content": "", "creation_timestamp": "2025-05-14T00:00:00.000000Z"}, {"uuid": "cec98ef9-5f4a-49b8-8ea1-7bdd05a596b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-14)", "content": "", "creation_timestamp": "2025-05-14T00:00:00.000000Z"}, {"uuid": "78e2cb78-5a2e-4d31-8677-3b712d9fbfed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "f8779d5e-5079-403f-b97d-19a0ba1f17a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-21)", "content": "", "creation_timestamp": "2025-06-21T00:00:00.000000Z"}, {"uuid": "b8d4e6a0-19b5-42bd-a108-0d8f7a50b013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "eb9ea18b-57c9-47c0-8930-ce56aa14c791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "56e703ff-779d-4b71-9f27-1e65c2df7bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "394c4bfd-a4bd-4f3e-b269-57726e6fcafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-17)", "content": "", "creation_timestamp": "2025-07-17T00:00:00.000000Z"}, {"uuid": "fb773215-385a-4515-aa9a-ed37c5d749c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-17)", "content": "", "creation_timestamp": "2025-07-17T00:00:00.000000Z"}, {"uuid": "cf8e19cc-1333-4182-8159-b4851f034f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "59e8048a-67ff-4f21-a271-452043e68642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-20)", "content": "", "creation_timestamp": "2025-07-20T00:00:00.000000Z"}, {"uuid": "7f605ad8-1847-4437-9b4b-8f78229a31e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "988806e6-a682-4098-9e71-993412c7d6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "2862cff9-057c-4fa4-9b94-0b536824e740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "3bbdaeef-cd45-4056-824c-219c1f9291fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "b8f5300a-df01-4239-a8ff-4f0b8b14c78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-85aeda5d-3a0884ef4e0bac3a", "content": "", "creation_timestamp": "2025-07-23T06:09:01.167949Z"}, {"uuid": "e62ae063-cc92-4e18-a253-67d9a63f2000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-22)", "content": "", "creation_timestamp": "2025-07-22T00:00:00.000000Z"}, {"uuid": "c00d626b-b3a8-483a-b4fd-57587f3e5dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "content": "", "creation_timestamp": "2025-07-23T00:00:00.000000Z"}, {"uuid": "61d64752-d4c8-46a5-bb4a-b0de0b187cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-25)", "content": "", "creation_timestamp": "2025-09-25T00:00:00.000000Z"}, {"uuid": "81fb14ca-6fd7-49f5-99da-e884eb30cad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "cc9e77f2-b4ea-414d-bd2b-683db557abd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "4ce0102a-539e-4a0b-977c-0350d0dd78db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "d1d1c0a9-64cf-493a-b67c-86fcd3d64c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "11fb1a9c-4076-4be0-9a61-39930b96375f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "c754acac-ad3a-41f7-bcb3-de43f45f6254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-25)", "content": "", "creation_timestamp": "2025-09-25T00:00:00.000000Z"}, {"uuid": "4e2aa429-1787-49af-b46d-d88beda5cbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "364a5c87-2e90-49a4-8e00-12d89d0e5690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "d8f2fca9-7155-497c-95c8-23fb492e0577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "a636d061-2f49-43b8-8294-bbdc69e7fb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "e8ac56ce-c328-48c2-938e-b709b5e52bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "c0fed838-3286-4e0e-95d0-f08ddf852149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "01f74406-dc9e-4131-9f8c-80c6001383f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-02)", "content": "", "creation_timestamp": "2025-08-02T00:00:00.000000Z"}, {"uuid": "3a341f61-3941-42d1-bdeb-9cbfd0d60caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "69ceb1de-dee0-4dcc-8845-fa035ae35608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://www.cert.at/de/warnungen/2022/10/kritische-sicherheitslucken-in-fortinet-firewalls-updates-verfugbar", "content": "", "creation_timestamp": "2022-10-10T06:11:01.000000Z"}, {"uuid": "a0342329-3360-4324-8c47-cbaa0b53ff35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "ea599d7d-0b18-4a73-bde5-1961b8939792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "c6a67811-d2ac-473e-81ba-ef1b0c026a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-04)", "content": "", "creation_timestamp": "2025-08-04T00:00:00.000000Z"}, {"uuid": "42c238c2-748d-44af-9103-1f94411558d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lvogm7dl222z", "content": "", "creation_timestamp": "2025-08-05T19:22:16.386508Z"}, {"uuid": "a7522907-53f7-459f-a3bb-cec03ef69064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lvoiubpns42l", "content": "", "creation_timestamp": "2025-08-05T20:02:35.244879Z"}, {"uuid": "1d39a56b-4090-4d72-a671-a3488212475e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4529444", "content": "", "creation_timestamp": "2025-08-05T20:50:06.300020Z"}, {"uuid": "e20aedda-03a2-426d-9cba-cdf962c17fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "2f792ff7-fd0e-4dfe-8dfd-cb0f2e5ad137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvpvn73rw22t", "content": "", "creation_timestamp": "2025-08-06T09:23:59.328177Z"}, {"uuid": "c3e1161e-6842-4782-9eb3-4190a1fb390a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvq4flzppc2t", "content": "", "creation_timestamp": "2025-08-06T11:25:30.547693Z"}, {"uuid": "a3e3f96e-01c0-467d-b8ef-2675f550647b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "content": "", "creation_timestamp": "2025-10-23T00:00:00.000000Z"}, {"uuid": "d3572606-76a3-414a-b7df-b1b4793e3866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "507e5a48-48d8-4316-bcce-30e3fcd54d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "facacd2c-a792-4b40-92fa-581cd6420da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oak6sq2z", "content": "", "creation_timestamp": "2025-08-06T21:02:29.122231Z"}, {"uuid": "c7a30003-3a5d-4261-9cef-590e08492664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "content": "", "creation_timestamp": "2025-08-06T00:00:00.000000Z"}, {"uuid": "5f87c704-87eb-43f8-a169-881651a1787a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvu3k3ye5s2h", "content": "", "creation_timestamp": "2025-08-08T01:20:13.995083Z"}, {"uuid": "e173153a-4945-4680-b101-c2853af3c70a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvu4qtbv6c2h", "content": "", "creation_timestamp": "2025-08-08T01:41:53.113661Z"}, {"uuid": "c8b71aac-e63a-4928-b923-66e6603052f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-07)", "content": "", "creation_timestamp": "2025-08-07T00:00:00.000000Z"}, {"uuid": "1e21084f-275b-454b-a89b-ae883716b22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "content": "", "creation_timestamp": "2025-08-07T00:00:00.000000Z"}, {"uuid": "57223cc4-0181-40a4-9d1b-b31b8a8de381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-08)", "content": "", "creation_timestamp": "2025-08-08T00:00:00.000000Z"}, {"uuid": "cf228033-2c6d-4fd3-9db4-27a2b5dd4d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "c3d2cd15-ea35-408d-b4ab-0312ed858dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "12f05b0a-bb8b-498b-b787-26b500710a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "content": "", "creation_timestamp": "2025-11-06T00:00:00.000000Z"}, {"uuid": "38ac3141-d9dd-47c5-9300-a7cd01b2d0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:13.000000Z"}, {"uuid": "338ca36d-ee25-4a7c-8d9b-3e491566a784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-09)", "content": "", "creation_timestamp": "2025-08-09T00:00:00.000000Z"}, {"uuid": "44ccc205-22ad-4a6c-8b1d-42e67a318964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "0572d09e-3068-4d83-a4c1-758136166c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "content": "", "creation_timestamp": "2025-12-01T00:00:00.000000Z"}, {"uuid": "b770f12e-7f20-4e31-ad6c-0135b6af0517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "381f0a18-e049-40f8-ae2a-8d12ed3e9043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "content": "", "creation_timestamp": "2025-10-08T00:00:00.000000Z"}, {"uuid": "b2bb6d7f-7e78-40cf-937c-2a81bdd3530c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-23)", "content": "", "creation_timestamp": "2025-10-23T00:00:00.000000Z"}, {"uuid": "5d631de7-2cb6-498c-a08d-4d42737c437b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "3e49e627-d91b-4e74-a9c5-8ba83d6c969b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "content": "", "creation_timestamp": "2025-08-11T00:00:00.000000Z"}, {"uuid": "c4dcb0d1-c178-46d5-97f6-13c863a29696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-06)", "content": "", "creation_timestamp": "2025-11-06T00:00:00.000000Z"}, {"uuid": "dddc62cf-11b6-4ccc-8ba4-25f69366ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-12)", "content": "", "creation_timestamp": "2025-08-12T00:00:00.000000Z"}, {"uuid": "4ec1fccc-b07e-414a-807d-d00c24bef5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "content": "", "creation_timestamp": "2025-09-17T00:00:00.000000Z"}, {"uuid": "2b459840-44f1-42cc-9247-914248c84883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "content": "", "creation_timestamp": "2025-11-19T00:00:00.000000Z"}, {"uuid": "a98661fd-5142-434b-963d-b8f0194851e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-13)", "content": "", "creation_timestamp": "2025-08-13T00:00:00.000000Z"}, {"uuid": "5aeff67e-fc02-4f34-8c0b-a0a58de53032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "2cbcb812-6e43-48aa-b98d-d573bde3e397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-17)", "content": "", "creation_timestamp": "2025-09-17T00:00:00.000000Z"}, {"uuid": "887b64c1-8f02-43ef-998c-5af788e0b17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "fd8c74ae-3333-4630-8b3b-684bb5dbb962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "4b8a2d9b-06a1-401e-abc8-779481810655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "f60bbe26-2e9b-412a-a965-5d711df42ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "content": "", "creation_timestamp": "2025-11-13T00:00:00.000000Z"}, {"uuid": "ce308827-eb26-4e05-969a-7a716d0c7f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "3bbf7227-a466-4d68-8dd8-2f2d3318d1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-19)", "content": "", "creation_timestamp": "2025-11-19T00:00:00.000000Z"}, {"uuid": "6677f110-953f-48e3-aea4-a53ac0e20327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "content": "", "creation_timestamp": "2025-10-09T00:00:00.000000Z"}, {"uuid": "9d75a6e0-dcf6-413d-88ed-2537713d00ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "6f9cdc87-198b-42f3-9d8a-8fcc776cb4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "0cd66f79-e075-450f-a5aa-5c676ce2586f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40733", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "d99d6221-2af2-4d66-86c0-971d1ee7ef39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://gist.github.com/zredlined/44192ca592721f64cf684ea0019540d0", "content": "", "creation_timestamp": "2025-08-18T15:53:12.000000Z"}, {"uuid": "9a104883-1a33-4b9a-a0b4-50062284c94f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-22)", "content": "", "creation_timestamp": "2025-10-22T00:00:00.000000Z"}, {"uuid": "f5984fb9-9809-4ff1-ae0f-26bf6ede666d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-18)", "content": "", "creation_timestamp": "2025-08-18T00:00:00.000000Z"}, {"uuid": "723fa267-b4ea-4bf4-a67f-6bfb3c766580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "27fd361e-ecd1-4432-ab83-e143d0f3300a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4065", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq24het2u", "content": "", "creation_timestamp": "2025-08-19T21:02:28.801979Z"}, {"uuid": "19cb7622-fd25-4b32-8916-ad16f755a8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "content": "", "creation_timestamp": "2025-10-22T00:00:00.000000Z"}, {"uuid": "33b80548-85e4-4c60-8d6b-8777908af75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "a004df70-3960-4a17-85a2-66205469c4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "628b3d23-9baf-4e04-8d84-e1c917fa0873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "05b6e467-ced2-43fe-8d6b-116efddb7550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-21)", "content": "", "creation_timestamp": "2025-08-21T00:00:00.000000Z"}, {"uuid": "ca33c742-2543-446f-b38b-0f95c3f9d745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "content": "", "creation_timestamp": "2025-08-21T00:00:00.000000Z"}, {"uuid": "b5a8961a-1339-4625-a999-e50bc4bf9cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "8ff559b3-3549-4bca-8823-72b0f2fa68a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "d6d80420-5fc0-4925-b717-201f3c01f6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m3fh7itadc2q", "content": "", "creation_timestamp": "2025-10-17T14:10:18.850513Z"}, {"uuid": "d195c89f-7f06-48a3-b784-6dd518f30a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-26)", "content": "", "creation_timestamp": "2025-11-26T00:00:00.000000Z"}, {"uuid": "047fd0fa-5971-4296-92be-b788de30ee9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "95301c42-bf68-402b-8b2c-b0d10fb67521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "content": "", "creation_timestamp": "2025-10-07T00:00:00.000000Z"}, {"uuid": "d89f376f-708c-4e36-baf6-ddbed4f8c4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "content": "", "creation_timestamp": "2025-11-05T00:00:00.000000Z"}, {"uuid": "615e453c-25c8-4584-b1ab-ee6137455606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "28b0105b-9458-4051-a0a2-6683065c51fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://gist.github.com/Darkcrai86/e74fee63d490a56ca931b89a9fccfa7d", "content": "", "creation_timestamp": "2025-11-14T17:07:27.000000Z"}, {"uuid": "cef74cd7-3dc1-43d4-9a4f-eb37c7c78d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-18)", "content": "", "creation_timestamp": "2025-11-18T00:00:00.000000Z"}, {"uuid": "85ebab9e-3381-4637-9bf1-363b2dbcab9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40733", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:04.000000Z"}, {"uuid": "5cced4b0-f3b9-45ed-8fc1-9edfb9022955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "content": "", "creation_timestamp": "2025-11-27T00:00:00.000000Z"}, {"uuid": "176b9e9f-5e12-4b39-9586-81e425478052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "content": "", "creation_timestamp": "2025-10-24T00:00:00.000000Z"}, {"uuid": "d351114d-7c1f-4f2e-8053-2d5ef2f2dbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "10d4c7cd-63c9-476b-ac19-5ae85ed259d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "80e83cde-ee89-451c-8f42-b5007cc54690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "269d6585-c654-47f2-8fb7-842dd3219fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-24)", "content": "", "creation_timestamp": "2025-08-24T00:00:00.000000Z"}, {"uuid": "a2fe6c64-5054-468d-ac82-f4ecfd5bd950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "cf93ccef-251e-4b7a-a086-14a79d303dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "edce7943-4b96-4ece-8503-f4d726655021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "819fee99-592e-458b-a4c4-b3fc53b5db39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-04)", "content": "", "creation_timestamp": "2025-11-04T00:00:00.000000Z"}, {"uuid": "8833864b-76bb-4fa5-8426-991ff42f03b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "7b5501aa-5013-4567-becc-385e9f4d8416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "1849ae2a-d682-49e2-bdf5-f51f6f3428d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "ae515972-91bf-4446-aa64-58cf2ee2ab0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fortinet_authentication_bypass_cve_2022_40684.rb", "content": "", "creation_timestamp": "2022-10-18T23:32:15.000000Z"}, {"uuid": "6035a3e4-4861-4eec-9699-2fee2d1d19a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "content": "", "creation_timestamp": "2025-09-11T00:00:00.000000Z"}, {"uuid": "ae40290f-7889-4b35-a2f8-ab0a333cd896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "content": "", "creation_timestamp": "2025-08-28T00:00:00.000000Z"}, {"uuid": "3b95200d-c6a1-400c-9b59-28e9de47e41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:41.000000Z"}, {"uuid": "a0f5e0f0-e21a-41ab-b195-c2c6d81b6890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb", "content": "", "creation_timestamp": "2025-05-21T15:50:12.000000Z"}, {"uuid": "7a928efd-7fb2-41a8-a03f-5904432262ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-30)", "content": "", "creation_timestamp": "2025-08-30T00:00:00.000000Z"}, {"uuid": "85c2c59a-fb03-4779-aebc-ce8ad1a2f9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb", "content": "", "creation_timestamp": "2024-12-18T12:41:54.000000Z"}, {"uuid": "a61e8432-7c9d-48b4-b414-14cdb27a1b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symmetricom_syncserver_rce.rb", "content": "", "creation_timestamp": "2023-06-13T22:37:51.000000Z"}, {"uuid": "b3f40e53-3ae8-483a-8355-a707426654d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40897", "type": "seen", "source": "https://gist.github.com/Ottapiens/e20fd8a5b3d73cb0ffa38013f25292e1", "content": "", "creation_timestamp": "2025-11-22T10:05:19.000000Z"}, {"uuid": "ac26215c-4975-49b1-beda-e9adda38efa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40897", "type": "seen", "source": "https://gist.github.com/Ottapiens/eec03543750502c92edc81d7c568d88c", "content": "", "creation_timestamp": "2025-11-22T10:06:48.000000Z"}, {"uuid": "9bd8bd7b-d100-4b3e-8c1c-5363e63ec0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "87d87813-a843-4e6a-9d25-fe4e051885b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "content": "", "creation_timestamp": "2025-09-24T00:00:00.000000Z"}, {"uuid": "8693263f-0cff-4ca3-9332-e433de209a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "content": "", "creation_timestamp": "2025-09-04T00:00:00.000000Z"}, {"uuid": "b6b200c9-4134-4f6d-a5f0-809ab73a4ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-02)", "content": "", "creation_timestamp": "2025-12-02T00:00:00.000000Z"}, {"uuid": "e236b7a8-cb5e-4d97-9722-a6c64416f4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "790d8c02-a1bf-4a6b-a9bb-ec47f471b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "199aceef-7e36-4ca1-9f2c-c18bb6986795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "content": "", "creation_timestamp": "2025-12-03T00:00:00.000000Z"}, {"uuid": "bd903ea4-ece8-4a81-bf7f-b51995d62a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "c722456d-1c90-4d85-b733-2a43f881cded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-04)", "content": "", "creation_timestamp": "2025-12-04T00:00:00.000000Z"}, {"uuid": "82ff55d1-81ff-45b8-84e6-e1f8be37000e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "f0f26cd8-a88f-40cd-9dd1-fecb51e82691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "7afed964-fe6c-44fa-a755-4eb8152e02d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "96e16a4d-6cd7-4627-9966-5820e149a982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "e9e5b96e-9211-429d-be68-23b6b8d8ea5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-07)", "content": "", "creation_timestamp": "2025-12-07T00:00:00.000000Z"}, {"uuid": "48e16eb7-ba18-4838-ac04-96c772079063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "c9c40cfd-cf9c-46a2-9e7b-dcf16ca2c185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "4f03093a-b3cf-40f9-8fe7-da3e8fb27992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-08)", "content": "", "creation_timestamp": "2025-12-08T00:00:00.000000Z"}, {"uuid": "c9e7c091-6360-432a-a196-861db08360dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "f724ed23-7e45-42bc-8592-e4cb7c184ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "3ea79ca7-043d-491f-9ceb-0abe35071b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "1fcf88da-834a-4aa3-aa1d-0f35b73594c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "content": "", "creation_timestamp": "2025-12-10T00:00:00.000000Z"}, {"uuid": "aaef290a-fcd4-4134-b916-80393926656e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "02178a8f-8cc9-4ccf-aef3-9db4161dae84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-11)", "content": "", "creation_timestamp": "2025-12-11T00:00:00.000000Z"}, {"uuid": "1295f309-44b1-4aa8-8cc5-b5982d5b73bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "content": "", "creation_timestamp": "2026-02-05T00:00:00.000000Z"}, {"uuid": "dabc57c1-fd66-46ef-acac-729228f1a77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "content": "", "creation_timestamp": "2025-12-11T00:00:00.000000Z"}, {"uuid": "45927591-d1cc-4319-954e-bbd2aeb221b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "e8dd2290-8b9b-4d0e-9513-2164dbffb3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "974dca73-1a77-4e88-9fc2-9f9eac8048f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "a9705420-d26a-4ff2-86d2-521ca3355de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "9162e6e4-9e08-4e38-bcef-f7630b9970a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "00689103-2d3a-432c-a495-499723a8756a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "8bf6e403-85f2-4642-9763-58138a666447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "04c3bffa-dae5-4dd3-9a1c-8f03d204141f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "ddaf78cb-f61b-4e8a-84a0-19b6491a6629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "c52d9260-e95a-4a0c-b557-7d95bc1acc42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "d76c6661-372e-488b-91e7-35eaf105922f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "9ba0230a-2d00-47c7-b5ec-3b1c7bcf532b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "9425065f-b4d1-4cbf-b89d-732d99dec0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "61a5da65-c626-45e6-ad2f-334fc81bd8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "7bbfb6f8-4290-4569-b7a8-b1d48e89b19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "6cafb55f-aa1b-4dde-9df0-69d4410b01ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "481a76ce-0ddf-4b7c-b94e-260dfe6fd5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "1abcca06-2c23-4976-853a-8acf79558d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "5c3bb9c4-65a1-4de8-8663-d954d2eff7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "91ed058b-570e-495a-99e8-bd6da736eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "847531ce-7fe1-49c1-b88c-48fc895601ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "622f71bb-82e1-4a42-9237-db629e2e7706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "2f7c177e-3de4-494e-b009-320e26b5e576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "content": "", "creation_timestamp": "2026-03-07T00:00:00.000000Z"}, {"uuid": "c654cf5d-4893-4604-8119-141e069f4e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-19)", "content": "", "creation_timestamp": "2025-12-19T00:00:00.000000Z"}, {"uuid": "d8b55634-f383-4f93-b907-587bd0bfc905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "content": "", "creation_timestamp": "2025-12-19T00:00:00.000000Z"}, {"uuid": "1cfe71c9-c6c7-488e-b35c-2c92ce7c20e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "c0bb7cfc-6d6c-44ea-be52-327679b0658d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "fc36760d-e85a-465e-8af6-f23b7ba9b81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "6ab5bcd9-0b9b-466f-be09-487373eb153b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "8b39b2d6-3a91-4ea3-aa75-e046cf502c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "77e048f3-3117-4b33-b44c-92132ba90f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "26da79cf-94e6-4f09-8df1-1fcfd77c1063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "5e0d90a0-929c-48f9-a4a8-954966b3e609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "53e2e1ad-8b97-4224-a2b9-b2d20ae03409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "a3b8a4bd-68d4-4914-85da-f66117be676c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "098fe387-9e3e-4173-9f54-02e02c143ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "f704d6e2-e10a-42a5-98a4-aee0538fac72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-26)", "content": "", "creation_timestamp": "2025-12-26T00:00:00.000000Z"}, {"uuid": "7de986a7-ed66-4c6b-8955-4c6965faae7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-27)", "content": "", "creation_timestamp": "2025-12-27T00:00:00.000000Z"}, {"uuid": "a168d5db-c736-4e03-aebe-059df52c565a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "d6ea84a0-0971-4643-bf1a-7aed18010d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "be8e9f84-1e2f-4ee2-b3a1-3234ae91d1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "d1ebde71-0441-49b0-affc-609a92f450ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "57a491da-7220-41b0-a3a2-994d8d067500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-28)", "content": "", "creation_timestamp": "2025-12-28T00:00:00.000000Z"}, {"uuid": "d264d9d0-ea74-4b7f-a7a2-4e4741c9827b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-28)", "content": "", "creation_timestamp": "2025-12-28T00:00:00.000000Z"}, {"uuid": "9ad7050d-5f37-44fd-bfb1-b7dfdd53a645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "seen", "source": "https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing/", "content": "", "creation_timestamp": "2025-12-29T21:01:14.000000Z"}, {"uuid": "240b4010-bcdb-401b-b495-dcf17b34a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "b32c9080-821f-4fa9-9542-9ce754d55428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "a6fdf514-d38a-4c73-b54b-37dd94a757ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "8438104e-8078-402f-ab2d-f2d0a9cbc776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-31)", "content": "", "creation_timestamp": "2025-12-31T00:00:00.000000Z"}, {"uuid": "9b16cc6b-c4ef-4832-8b39-ff8619b54e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "content": "", "creation_timestamp": "2025-12-31T00:00:00.000000Z"}, {"uuid": "e2244c7d-e02e-4cba-9118-41692898a881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "content": "", "creation_timestamp": "2026-01-01T00:00:00.000000Z"}, {"uuid": "2fc49ea5-79fe-4c2f-ab45-c8eb65e3aba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "content": "", "creation_timestamp": "2026-01-01T00:00:00.000000Z"}, {"uuid": "7d04665b-f1a1-43f8-932c-5fdcba03883c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "a3017da4-e69c-4ad3-a571-a0ddc7970aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "ad6a550c-c1f9-47a0-8490-037d08bf785f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "e90b6e54-9170-432e-bc17-7b02e42d56d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-03)", "content": "", "creation_timestamp": "2026-01-03T00:00:00.000000Z"}, {"uuid": "9a6d90df-1490-486e-be4b-40e04ac97bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "92f0784e-8dfc-4255-b710-06edc12b0463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "content": "", "creation_timestamp": "2026-01-05T00:00:00.000000Z"}, {"uuid": "52b5b38c-e28b-4551-a593-783a84b6ae58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "c9ab9ac7-4d81-4789-b079-83a82566ece4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "7f905d95-428d-4ca8-b6ae-d5a370c329aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "f661ad04-f952-4d56-8bce-866d83aa0182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "219b7e78-2b67-48e3-abc7-a3a0d4199fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "6b196878-b240-4a45-916d-5c92e2f5d8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "255f0a09-c9f3-42c9-b899-cfb14dfaa40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "69f0925f-a498-4bf9-82a7-1d0a71f45a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "e1ffb36b-b12f-474a-afec-0764f51aea17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "8bd7c9a8-e47c-42d0-b79b-dd022db67808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "ba7b1735-427a-4431-9e44-ef6240e0fb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "16b71ec4-41f3-414e-81f5-7eac63fd0cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "a4bc2c1d-1f33-4b3a-8063-4f86dab52f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "cb1bec62-7c2d-487f-8b6c-ad981da9cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "f75576f1-026f-4a18-afd1-4e8e6acda21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5b2eeb64-ac87-47e3-a16d-660369c275cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "d2a260b6-930a-49f4-8201-17460ae2092d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "b629183a-1fd1-4fb8-bc2e-2e4d1fb767eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "00f7935e-c750-4930-a514-60bd2c223edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "f538effb-67fc-4517-bcb5-d368fa6d5d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "8c1c4615-80cb-4784-b73c-e0519c6c2284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "acccec53-b678-4c1e-9f9b-118f0454c261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "70732189-57c9-4266-be95-60cd9616f79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "d45248d6-6eaf-49b9-9c69-71e47e952c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "d935e95b-2827-467b-afba-fafcf73d351c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-4048", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "080c9ee0-23c7-4338-809d-cbe20802b64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "eab634a5-94fa-4a05-af75-7d1fac9d0864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "ae3e28fb-ca15-4c61-a051-cd501b750a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "93126ff1-8cbe-4f36-8b57-0dec3a8a0585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://vulnerability.circl.lu/comment/ad2fd548-18b4-43c1-af5f-c72c3096c2a7", "content": "", "creation_timestamp": "2025-01-16T16:05:29.258596Z"}, {"uuid": "3fd79f73-e3d6-4a17-8297-23e83cd00c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "d2168e60-73e0-4ae6-82d6-7d877240d452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "3cd38eaf-f981-4e05-a764-e87ad1316335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40196", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3j6ayro2o", "content": "", "creation_timestamp": "2026-01-21T16:25:12.533037Z"}, {"uuid": "eb02089a-9da9-4d80-8533-d583d4f77a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "8ca3be9e-a564-43af-9d48-d51794ff9d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-40507", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef", "content": "", "creation_timestamp": "2024-10-14T15:50:35.983245Z"}, {"uuid": "38b4d893-bb2e-4387-ae0a-1d3c1f9f4be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "4df38135-ec74-4395-8295-df0d6d92b11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "e6bfe79c-6ac2-4938-a106-ade449f2bd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "fc07843b-ae15-4a0e-a825-647465ceb143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "a5268fe1-c5af-4371-839a-1fa10c316f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-40196", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "0af8b7f0-7af1-439b-9b5c-6155f16dd926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40897", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "1e4289b9-bcd2-44ac-8afe-6c25fc316234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40964", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "428675b4-b4df-4593-ba37-e8f282356d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=871", "content": "", "creation_timestamp": "2022-09-14T04:00:00.000000Z"}, {"uuid": "fbcb80db-bd62-4ced-ab9c-cb1951a45e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "07f8cea3-8e9a-4768-9a23-ad2b598919f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=888", "content": "", "creation_timestamp": "2022-10-10T04:00:00.000000Z"}, {"uuid": "a1aa2eac-569a-4fc9-ba41-a2eacacd3a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2022", "content": "", "creation_timestamp": "2022-10-10T10:25:16.000000Z"}, {"uuid": "234a52cb-0b85-44ac-8cb3-9172f88c4098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=891", "content": "", "creation_timestamp": "2022-10-11T04:00:00.000000Z"}, {"uuid": "1280a513-ad0b-4890-93c0-f58cb582a4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "4aee3fe9-ea90-4f10-a6ff-94072020c8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40133", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "fbcbe4a4-d204-41ce-a4cd-8dd2ee70f30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40735", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8e1855fc-db40-4ba4-9fea-220302c36351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "cdd4070a-6d22-41df-94ea-985cee3cb903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "9959e111-1373-4b8f-abef-499a9cae5ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "62fb650b-efb3-4a0f-af71-c0c0ce309864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "ab7c07d9-3729-4e82-b94b-7af85c3e5bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40619", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdgntgyp2g2s", "content": "", "creation_timestamp": "2026-01-27T21:03:00.641021Z"}, {"uuid": "1711fc15-7203-4192-9697-e3b8706cc6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "ddafe4b1-75a7-4231-a22f-6796842608aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "7f699330-2ef2-4783-903f-8bd89d2f3499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33d46549-9ac8-49cd-b791-884ab3ac9e20", "content": "", "creation_timestamp": "2026-02-02T12:25:55.554702Z"}, {"uuid": "b3717315-f837-4562-b8b2-3c2691ec6f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40765", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "content": "", "creation_timestamp": "2026-02-02T12:27:04.885054Z"}, {"uuid": "0ee7ede1-17e8-40e3-8e48-95f5b73387a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7d5078d2-9fc2-443b-952b-331db33a6a5e", "content": "", "creation_timestamp": "2026-02-02T12:27:11.744801Z"}, {"uuid": "22810fba-b772-4c9e-bd93-cc5f4c98a551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40139", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b764081d-d77b-402a-bb63-79e566dfe20c", "content": "", "creation_timestamp": "2026-02-02T12:27:12.571679Z"}, {"uuid": "f5d312b3-782a-4f4e-a985-a4792c2735a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "6c167116-41dc-464c-8969-7469c02d17af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "948ba2bb-95e4-41c3-a4a7-1eec4e08cd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "Telegram/CYiC6KAcAfm621pl2BFit5z4KE78wCCTVrL0xQPEoHOnJlw", "content": "", "creation_timestamp": "2025-12-30T21:00:05.000000Z"}, {"uuid": "fa76d9b6-839e-4d90-9bd5-6cee93b9c4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-40897", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "b9c2e7a2-aa31-448d-ac15-fc64008dc34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40265", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40265\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version \"65\" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version \"65\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.\n\ud83d\udccf Published: 2022-11-30T00:04:43.069Z\n\ud83d\udccf Modified: 2025-04-24T18:45:03.895Z\n\ud83d\udd17 References:\n1. https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf\n2. https://jvn.jp/vu/JVNVU94702422", "creation_timestamp": "2025-04-24T19:06:41.000000Z"}, {"uuid": "11f3f3ad-5bf8-4829-991e-e01b5593d35a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "f454bbe9-3295-4743-82f5-910bc7b40aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "2ec64d5a-f50b-4932-8ead-73b6b6852848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/cKure/10298", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CVE-2022-40684 (CVSS score: 9.6).\n\nFortinet revealed that the newly patched critical security vulnerability impacting its firewall and proxy products is being actively exploited in the wild.\n\nhttps://thehackernews.com/2022/10/fortinet-warns-of-active-exploitation.html", "creation_timestamp": "2022-10-11T08:43:59.000000Z"}, {"uuid": "dbd2a048-2de1-443f-9f7d-64dbd894e9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "962854a9-42a5-4038-840b-63ee4061f493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40005", "type": "seen", "source": "MISP/a7fb943f-00ef-43d8-87ca-c9ef19928d19", "content": "", "creation_timestamp": "2026-04-14T12:01:44.000000Z"}, {"uuid": "24e690f3-8b53-43c4-95b6-8f65ab7baaab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "e7a07196-d7f3-45dc-978f-956e9461c394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40363", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10448", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 CVE-2022-40363: Exploiting Flipper Zero\u2019s NFC file loader.\n\nhttps://vvx7.io/posts/2022/09/your-amiibos-haunted/\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-40363", "creation_timestamp": "2022-11-19T09:27:11.000000Z"}, {"uuid": "ae1a80dd-b746-4fc4-854b-e02488efa6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10306", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass IOCs (CVE-2022-40684).\n\nhttps://www.horizon3.ai/fortinet-iocs-cve-2022-40684/", "creation_timestamp": "2022-10-13T21:04:20.000000Z"}, {"uuid": "501827dd-b80c-44dd-b39e-810ad57708cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10312", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions.\n\nhttps://github.com/carlosevieira/CVE-2022-40684", "creation_timestamp": "2022-10-15T09:58:13.000000Z"}, {"uuid": "a78411ef-1c69-4b7a-ad65-544ca5447a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10482", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC.\n\nhttps://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-24T13:01:10.000000Z"}, {"uuid": "47d74202-0572-4295-a7b4-b1755b8224b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "b20884e3-058d-41cf-bda1-11b01fdf2a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "204fef9f-7d74-448b-8c64-12b67c8e2ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "c15d16f6-1410-41ed-a6b9-943aa2c12a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "000c01f4-eebe-4827-a1b5-6967a158ab06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "7b89c1b5-6188-4c95-a7f4-469be380bd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "03cef731-d397-4af2-9e30-ccb2e67aa2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40266", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40266\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.\n\ud83d\udccf Published: 2022-11-24T08:20:14.606Z\n\ud83d\udccf Modified: 2025-04-25T17:56:41.874Z\n\ud83d\udd17 References:\n1. https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdf\n2. https://jvn.jp/vu/JVNVU95633416", "creation_timestamp": "2025-04-25T18:08:09.000000Z"}, {"uuid": "f8e317e9-c1d5-48a0-9fcd-496768217eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40840", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40840\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.\n\ud83d\udccf Published: 2022-11-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T20:56:47.819Z\n\ud83d\udd17 References:\n1. http://ndkadvancedcustomizationfields.com\n2. https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40840/poc.txt", "creation_timestamp": "2025-05-02T21:16:31.000000Z"}, {"uuid": "4a2bd887-c156-418e-ad95-a4e2b362eeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3112", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aUtilities for exploiting vulnerability CVE-2022-40684 (FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface).\nURL\uff1ahttps://github.com/und3sc0n0c1d0/CVE-2022-40684\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-10-24T17:01:32.000000Z"}, {"uuid": "3c4cad2e-1035-496a-9ed3-c825ceafe05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3125", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aExploit Fortigate - CVE-2022-40684\nURL\uff1ahttps://github.com/gustavorobertux/gotigate\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-10-27T21:52:50.000000Z"}, {"uuid": "c510b746-436e-474f-b829-8a1e6afb1ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4068", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4068\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.\n\ud83d\udccf Published: 2022-11-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T18:59:04.307Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/becfecc4-22a6-4f94-bf83-d6030b625fdc\n2. https://github.com/librenms/librenms/commit/09a2977adb8bc4b1db116c725d661160c930d3a1", "creation_timestamp": "2025-04-25T19:07:16.000000Z"}, {"uuid": "a50e02fc-8e89-46c7-b653-f26bc0a9eb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3414", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aA Shodan hunter for CVE-2022-40140 \nURL\uff1ahttps://github.com/ipsBruno/CVE-2022-40140-SCANNER\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-11-13T22:06:28.000000Z"}, {"uuid": "894b08e5-e05d-4f7f-812f-0d83bc402563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40228", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40228\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: \n\n\nIBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527.\n\n\n\ud83d\udccf Published: 2022-11-22T18:52:13.196Z\n\ud83d\udccf Modified: 2025-04-25T19:56:58.200Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6840759\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/235527", "creation_timestamp": "2025-04-25T20:07:57.000000Z"}, {"uuid": "0e3022f8-a2fa-4379-af68-ed289ae95124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40978", "type": "seen", "source": "https://t.me/zema_notes/25", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0438\u0434\u0435\u0439 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u043e\u0432 \u043d\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u044e \u0442\u043e, \u0447\u0442\u043e \u0435\u0441\u0442\u044c.\n\n\u041d\u0430 \u0434\u043d\u044f\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0432\u043e\u044e \u043f\u0435\u0440\u0432\u0443\u044e CVE. 7.5 \u043f\u043e CVSS 3.0. \u041d\u0435\u043f\u043b\u043e\u0445\u043e.\n\n\u0416\u0430\u043b\u044c \u043d\u0435 \u043a\u0430\u043a\u043e\u0439-\u043d\u0438\u0431\u0443\u0434\u044c \u0432\u0435\u0431 \u0441\u0435\u0440\u0432\u0438\u0441 + \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e-\u0442\u0430\u043a\u0438 \u0441\u043c\u0435\u0448\u043d\u0430\u044f. \u041d\u043e \u0432\u0441\u0451 \u0436\u0435 \u0444\u0430\u043a\u0442 \u0435\u0441\u0442\u044c \u0444\u0430\u043a\u0442.\n\nCVE-2022-40978\n\n\u041c\u0435\u0440\u0447\u0430 \u0437\u0430\u0436\u0430\u043b\u0438 :(\n\n\n\nP.S.: \u043f\u0435\u0440\u0435\u0437\u0430\u043b\u0438\u0432, \u0438\u0431\u043e \u0444\u043e\u0442\u043a\u0430 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0430\u0441\u044c \u0444\u0430\u0439\u043b\u043e\u043c :(\n\n#\u0414\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f #CVE", "creation_timestamp": "2022-10-25T15:01:15.000000Z"}, {"uuid": "9272dbe4-2cca-4485-bf6d-87086d8e1d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/PHoJQGmgGzsQrC8Gnxfc8pLZD55xgKQzGqHQgQ7hPSbJXl0", "content": "", "creation_timestamp": "2025-11-19T15:00:09.000000Z"}, {"uuid": "23d31911-4384-4e87-9ba6-34c550899512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40602", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40602\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.\n\ud83d\udccf Published: 2022-11-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T14:24:37.801Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-configured-password-vulnerability-of-lte3301-m209", "creation_timestamp": "2025-04-28T15:10:58.000000Z"}, {"uuid": "93539ccf-8714-4c81-8447-78267e1e292b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/InternetInfection/6479", "content": "New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection\nhttps://thehackernews.com/2022/11/new-flaw-in-acer-laptops-could-let.html\n\nAcer has released a firmware update to address a security vulnerability that could be potentially weaponized to turn off UEFI Secure Boot on affected machines.\nTracked as\u00a0CVE-2022-4020, the high-severity vulnerability affects five different models that consist of Aspire A315-22, A115-21, and A315-22G, and Extensa EX215-21 and EX215-21G.\n\nThe PC maker described the vulnerability as\n\n#news", "creation_timestamp": "2022-11-30T01:36:32.000000Z"}, {"uuid": "5190196a-bf1d-4026-925c-7984d9646c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40954\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).\n\ud83d\udccf Published: 2022-11-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T13:50:28.084Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/27646\n2. https://lists.apache.org/thread/0tmdlnmjs5t4gsx5fy73tb6zd3jztq45", "creation_timestamp": "2025-04-29T14:11:46.000000Z"}, {"uuid": "87372fb4-3a00-4ea4-94f7-7f6cc95cedf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4067", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4067\n\ud83d\udd25 CVSS Score: 3.4 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.\n\ud83d\udccf Published: 2022-11-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:56:44.425Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/3ca7023e-d95c-423f-9e9a-222a67a8ee72\n2. https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c", "creation_timestamp": "2025-04-28T20:11:14.000000Z"}, {"uuid": "7cba5372-935f-4dbf-bbaa-2839ad0454b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40770", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40770\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.\n\ud83d\udccf Published: 2022-11-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:38:56.406Z\n\ud83d\udd17 References:\n1. https://manageengine.com\n2. https://www.manageengine.com/products/service-desk/CVE-2022-40770.html", "creation_timestamp": "2025-04-28T20:11:22.000000Z"}, {"uuid": "e478dc12-6e70-4b3b-9d4c-e95ce566f217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40772", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13736", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40772\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.\n\ud83d\udccf Published: 2022-11-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:34:22.092Z\n\ud83d\udd17 References:\n1. https://manageengine.com\n2. https://www.manageengine.com/products/service-desk/CVE-2022-40772.html", "creation_timestamp": "2025-04-28T20:11:27.000000Z"}, {"uuid": "55640108-5f63-4d65-a052-fa413f25eca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40771", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40771\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.\n\ud83d\udccf Published: 2022-11-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:37:36.773Z\n\ud83d\udd17 References:\n1. https://manageengine.com\n2. https://www.manageengine.com/products/service-desk/CVE-2022-40771.html", "creation_timestamp": "2025-04-28T20:11:23.000000Z"}, {"uuid": "490cde35-b8f8-4f0f-8dfa-2c1c64a164ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/v9uCn_dLujK0z6nWpoAPZrXvhfEaTfJKfYKQA8qCx-Erqh4", "content": "", "creation_timestamp": "2026-04-01T15:00:07.000000Z"}, {"uuid": "8a8dff4c-a1c7-4606-817e-222baea258d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40282", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13837", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40282\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is BSECV-2022-21.\n\ud83d\udccf Published: 2022-11-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T14:54:42.736Z\n\ud83d\udd17 References:\n1. https://www.belden.com/support/security-assurance\n2. http://seclists.org/fulldisclosure/2022/Nov/19\n3. http://packetstormsecurity.com/files/170063/Hirschmann-Belden-BAT-C2-8.8.1.0R8-Command-Injection.html", "creation_timestamp": "2025-04-29T15:11:44.000000Z"}, {"uuid": "fc7f1171-682b-4075-8c72-abc171fecbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40318", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/2553", "content": "\u200b\u26a1\ufe0f FRRouting \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0448\u043b\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0448\u043b\u044e\u0437\u0430 (BGP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DoS-\u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u044b\u0435 BGP-\u0443\u0437\u043b\u044b.\n\nBGP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0448\u043b\u044e\u0437\u0430, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Forescout Vedere Labs \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u0435\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430: FRRouting, BIRD, OpenBGPd, \u200b\u200bMikrotik RouterOS, Juniper JunOS, Cisco IOS \u0438 Arista EOS. \u0427\u0442\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nFRRouting \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux \u0438 Unix. \u0422\u0440\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 FRRouting \u0432\u0435\u0440\u0441\u0438\u0438 8.4 .\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f FRRouting \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a NVIDIA Cumulus, DENT \u0438 SONiC, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0438\u0437 \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 Out-of-bounds, \u043a\u0430\u0436\u0434\u0443\u044e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043d\u0430 6,5 \u0431\u0430\u043b\u043b\u043e\u0432: CVE-2022-40302 , CVE-2022-40318 , CVE-2022-43681 . \u041a\u0430\u043a \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e \u0432\u044b\u0448\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 DoS \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u043e \u043d\u0430 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0438\u0437-\u0437\u0430 \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u043a\u043e\u0434\u0430, \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u044d\u0442\u0430\u043f\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 OPEN\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Forescout.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u0443\u0437\u043b\u0430 BGP \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u0443\u0437\u043b\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043d\u0435\u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u043c\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 BGP OPEN.\n\n\u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u043e\u0433\u043e \u0444\u0430\u043a\u0442\u0430, \u0447\u0442\u043e \u00abFRRouting \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f OPEN (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u0435\u043a\u0430\u043f\u0441\u0443\u043b\u0438\u0440\u0443\u044f \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b) \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u043b\u044f BGP Identifier \u0438 ASN \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u00bb.\n\nForescout \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c BGP Fuzzer . \u041e\u043d \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 Python \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432 BGP.\n\n\u00ab\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 BGP \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u0430\u0431\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \u0427\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP, \u0441\u0442\u043e\u0438\u0442 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\u00bb, \u2014 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-05-04T02:44:52.000000Z"}, {"uuid": "0677ab8a-3e1c-47de-b445-4d69f593ed87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40302", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/2553", "content": "\u200b\u26a1\ufe0f FRRouting \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0448\u043b\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0448\u043b\u044e\u0437\u0430 (BGP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DoS-\u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u044b\u0435 BGP-\u0443\u0437\u043b\u044b.\n\nBGP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0448\u043b\u044e\u0437\u0430, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Forescout Vedere Labs \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u0435\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430: FRRouting, BIRD, OpenBGPd, \u200b\u200bMikrotik RouterOS, Juniper JunOS, Cisco IOS \u0438 Arista EOS. \u0427\u0442\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nFRRouting \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux \u0438 Unix. \u0422\u0440\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 FRRouting \u0432\u0435\u0440\u0441\u0438\u0438 8.4 .\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f FRRouting \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a NVIDIA Cumulus, DENT \u0438 SONiC, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0438\u0437 \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 Out-of-bounds, \u043a\u0430\u0436\u0434\u0443\u044e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043d\u0430 6,5 \u0431\u0430\u043b\u043b\u043e\u0432: CVE-2022-40302 , CVE-2022-40318 , CVE-2022-43681 . \u041a\u0430\u043a \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e \u0432\u044b\u0448\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 DoS \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u043e \u043d\u0430 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0438\u0437-\u0437\u0430 \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u043a\u043e\u0434\u0430, \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u044d\u0442\u0430\u043f\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 OPEN\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Forescout.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u0443\u0437\u043b\u0430 BGP \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u0443\u0437\u043b\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043d\u0435\u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u043c\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 BGP OPEN.\n\n\u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u043e\u0433\u043e \u0444\u0430\u043a\u0442\u0430, \u0447\u0442\u043e \u00abFRRouting \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f OPEN (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u0435\u043a\u0430\u043f\u0441\u0443\u043b\u0438\u0440\u0443\u044f \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b) \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u043b\u044f BGP Identifier \u0438 ASN \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u00bb.\n\nForescout \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c BGP Fuzzer . \u041e\u043d \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 Python \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432 BGP.\n\n\u00ab\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 BGP \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u0430\u0431\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \u0427\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP, \u0441\u0442\u043e\u0438\u0442 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\u00bb, \u2014 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-05-04T02:44:52.000000Z"}, {"uuid": "952a9fb7-9088-46d6-ac53-5f2aa99668a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40529", "type": "exploited", "source": "https://t.me/itsec_news/2659", "content": "\u200b\u26a1\ufe0fGoogle \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Android, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e \u043d\u0430\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u044f\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0430 \u043e\u0434\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 5 \u0438\u044e\u043d\u044f 2023 \u0433\u043e\u0434\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2022-22706 , \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u044f\u0434\u0440\u0430 Mali, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google TAG, \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b Samsung.\n\n\u00ab\u0415\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e CVE-2022-2706 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2022-22706 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 , \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u0440\u0442\u0430.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u0438\u0437 10, \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u043a \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e ARM, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u044f\u0434\u0440\u0430:\n\n\u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u044f\u0434\u0440\u0430 Midgard GPU: \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 r26p0 \u0434\u043e r31p0;\n\u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u044f\u0434\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Bifrost: \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 r0p0 \u2014 r35p0;\n\u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u044f\u0434\u0440\u0430 Valhall GPU: \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 r19p0 \u0434\u043e r35p0.\nARM \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u044f\u0434\u0440\u0430 Bifrost \u0438 Valhall GPU r36p0, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Midgard r32p0, \u043d\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Samsung \u0442\u043e\u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-22706 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430. \u0411\u044b\u0441\u0442\u0440\u0430\u044f \u0440\u0435\u0430\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0435\u0451 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u044f\u0432\u043d\u043e \u0441\u0442\u0430\u043b\u0438 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041a \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Android, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n\nCVE-2023-21127 , CVE-2023-21108 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 Android 11, 12 \u0438 13;\n\nCVE-2023-21130 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Android 13;\n\nCVE-2022-33257 , CVE-2022-40529 -\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b Qualcomm \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Android 10 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f Google \u0438 \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u044d\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0434\u043e\u043b\u0436\u043d\u044b \u0437\u043d\u0430\u0442\u044c \u043e \u0440\u0438\u0441\u043a\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u0418\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043b\u0438\u0431\u043e \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435, \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Android, \u043b\u0438\u0431\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c\u0443 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0443 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u043e\u0439.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-06-07T09:36:45.000000Z"}, {"uuid": "002b22ad-912a-44fd-8964-075f3b3af92f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40663", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13898", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40663\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.\n\ud83d\udccf Published: 2022-09-15T15:26:38.000Z\n\ud83d\udccf Modified: 2025-04-29T18:38:35.378Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-22-1219/", "creation_timestamp": "2025-04-29T19:12:26.000000Z"}, {"uuid": "d3499d31-cbcf-4ec0-9b35-a6434b7a7f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4055", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4055\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.\n\ud83d\udccf Published: 2022-11-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T18:55:59.428Z\n\ud83d\udd17 References:\n1. https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267", "creation_timestamp": "2025-04-29T19:12:21.000000Z"}, {"uuid": "78854e15-08b5-4ef1-b213-96764b828b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40470", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13906", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40470\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.\n\ud83d\udccf Published: 2022-11-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:03:23.332Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1UDuez2CTscdWXYzyXLi3x8CMs9IWLL11/view?usp=sharing", "creation_timestamp": "2025-04-29T20:12:25.000000Z"}, {"uuid": "5a447863-9e87-41db-859d-deaad76130ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/codeby_sec/6575", "content": "\u200b\ud83d\udda5 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 BIOS. \u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438: \u041f\u041a, \u043c\u043e\u043d\u043e\u0431\u043b\u043e\u043a\u0438, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation \u0438 ThinkSystem.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0430\u0432, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430:\n\u2014 CVE-2021-28216 \u0432 TianoCore EDK II BIOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\u2014 CVE-2022-40134 \u0438 CVE-2022-40135 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 Set Bios Password SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM\n\u2014 CVE-2022-40137 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e SMM \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 UEFI \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c. Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 BIOS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #lenovo #vulnerability", "creation_timestamp": "2022-09-15T13:07:32.000000Z"}, {"uuid": "a0f35344-02fc-44b5-9c19-1050575e4ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/codeby_sec/6575", "content": "\u200b\ud83d\udda5 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 BIOS. \u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438: \u041f\u041a, \u043c\u043e\u043d\u043e\u0431\u043b\u043e\u043a\u0438, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation \u0438 ThinkSystem.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0430\u0432, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430:\n\u2014 CVE-2021-28216 \u0432 TianoCore EDK II BIOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\u2014 CVE-2022-40134 \u0438 CVE-2022-40135 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 Set Bios Password SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM\n\u2014 CVE-2022-40137 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e SMM \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 UEFI \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c. Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 BIOS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #lenovo #vulnerability", "creation_timestamp": "2022-09-15T13:07:32.000000Z"}, {"uuid": "65716c17-4c97-40ec-a938-e9a891041ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/codeby_sec/6575", "content": "\u200b\ud83d\udda5 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 BIOS. \u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438: \u041f\u041a, \u043c\u043e\u043d\u043e\u0431\u043b\u043e\u043a\u0438, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation \u0438 ThinkSystem.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0430\u0432, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430:\n\u2014 CVE-2021-28216 \u0432 TianoCore EDK II BIOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\u2014 CVE-2022-40134 \u0438 CVE-2022-40135 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 Set Bios Password SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM\n\u2014 CVE-2022-40137 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e SMM \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 UEFI \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c. Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 BIOS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #lenovo #vulnerability", "creation_timestamp": "2022-09-15T13:07:32.000000Z"}, {"uuid": "ea1e8941-6faa-47d8-9b0b-1143c23148e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://t.me/true_secator/7948", "content": "\u041a\u043b\u0438\u0435\u043d\u0442\u044b \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 Trend Micro \u043e\u043f\u044f\u0442\u044c \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u0432 \u0432\u0438\u0434\u0443 \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Apex One, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443  \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a RCE \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows.\n\nApex One - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u0443\u0435\u0442 \u043d\u0430 \u043d\u0438\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u041f\u041e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apex One \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-71210 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Trend Micro Apex One, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2025-71211 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Apex One, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e \u043f\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0443 CVE-2025-71210, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 Trend Micro \u0432 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u00ab\u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Trend Micro Apex One, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437\u0432\u043d\u0435, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0435\u0449\u0435 \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b\u00bb.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0440\u044f\u0434\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, Trend Micro \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c Trend Micro \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 SaaS Apex One \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Build 14136, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a EoP \u0432 \u0430\u0433\u0435\u043d\u0442\u0435 Windows, \u0438 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0430\u0433\u0435\u043d\u0442 \u0434\u043b\u044f macOS.\n\n\u041f\u043e\u043a\u0430 \u0432 Trend Micro \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u0435\u0441\u044c\u043c\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apex One \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043b\u0435\u0442.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438,\u00a0\u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2025 Trend Micro \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f RCE (CVE-2025-54948) \u0432 Apex One, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022\u00a0(CVE-2022-40139) \u0438 \u0432\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430\u00a0(CVE-2023-41179).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u043a\u0430\u0440\u0430\u043d\u0434\u0430\u0448\u0435 \u0432 CISA \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Trend Micro Apex, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u043b\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "creation_timestamp": "2026-02-27T10:17:16.000000Z"}, {"uuid": "7d39c524-508b-4728-8860-f92daaa17cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40881\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php\n\ud83d\udccf Published: 2022-11-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:29:32.826Z\n\ud83d\udd17 References:\n1. https://github.com/Timorlover/SolarView_Compact_6.0_rce_via_network_test.php", "creation_timestamp": "2025-04-29T21:13:42.000000Z"}, {"uuid": "09a1dfa3-01dc-4ab1-9233-e309d105a0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40663", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40663\n\ud83d\udd39 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.\n\ud83d\udccf Published: 2022-09-15T15:26:38\n\ud83d\udccf Modified: 2025-01-07T19:02:22.686Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-22-1219/", "creation_timestamp": "2025-01-07T19:40:11.000000Z"}, {"uuid": "2e65d5c6-00b3-41db-85cc-ebe908e4e820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40507", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40507\n\ud83d\udd39 Description: Memory corruption due to double free in Core while mapping HLOS address to the list.\n\ud83d\udccf Published: 2023-06-06T07:38:52.586Z\n\ud83d\udccf Modified: 2025-01-07T19:33:51.689Z\n\ud83d\udd17 References:\n1. https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin", "creation_timestamp": "2025-01-07T20:40:23.000000Z"}, {"uuid": "362abdb0-83b4-4ada-855d-96e5e2c6a6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40633\n\ud83d\udd39 Description: A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.\n\ud83d\udccf Published: 2023-03-02T22:18:31.192Z\n\ud83d\udccf Modified: 2025-01-17T22:11:59.387Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-03", "creation_timestamp": "2025-01-17T22:57:06.000000Z"}, {"uuid": "7c762efb-f3e0-4ae3-b06b-34303e533dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4048", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2820", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4048\n\ud83d\udd39 Description: Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.\n\ud83d\udccf Published: 2023-05-15T09:23:18.977Z\n\ud83d\udccf Modified: 2025-01-23T19:25:03.004Z\n\ud83d\udd17 References:\n1. https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=", "creation_timestamp": "2025-01-23T20:03:42.000000Z"}, {"uuid": "335bd61a-57a7-41e1-985c-4e15236ebe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40972", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2973", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40972\n\ud83d\udd39 Description: Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2023-05-10T13:17:17.162Z\n\ud83d\udccf Modified: 2025-01-24T17:39:20.944Z\n\ud83d\udd17 References:\n1. https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00778.html", "creation_timestamp": "2025-01-24T18:05:23.000000Z"}, {"uuid": "90d494d2-b114-4993-904b-a9ec3dfa3575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3840", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40916\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Tiny File Manager v2.4.7 and below is vulnerable to session fixation.\n\ud83d\udccf Published: 2025-02-06T18:31:05Z\n\ud83d\udccf Modified: 2025-02-07T21:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2022-40916\n2. https://github.com/prasathmani/tinyfilemanager\n3. https://github.com/whitej3rry/CVE-2022-40916/blob/main/PoC.md", "creation_timestamp": "2025-02-07T22:03:04.000000Z"}, {"uuid": "8ea46714-d2cf-4f33-8839-6fd4d149b13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40662", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40662\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15351.\n\ud83d\udccf Published: 2022-09-15T15:26:37.000Z\n\ud83d\udccf Modified: 2025-04-30T15:01:53.815Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-22-1218/", "creation_timestamp": "2025-04-30T15:13:49.000000Z"}, {"uuid": "db79a6b6-9a66-43f2-8161-3ddde3d8603a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40976", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40976\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.\n\ud83d\udccf Published: 2022-11-24T09:19:54.553Z\n\ud83d\udccf Modified: 2025-04-25T17:56:03.675Z\n\ud83d\udd17 References:\n1. https://cert.vde.com/en/advisories/VDE-2022-044/\n2. https://cert.vde.com/en/advisories/VDE-2022-045/", "creation_timestamp": "2025-04-25T18:08:10.000000Z"}, {"uuid": "636fb419-cd6e-4617-b40d-a7a142d841c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40309", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40309\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Users with write permissions to a repository can delete arbitrary directories.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T16:02:30.071Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/1odl4p85r96n27k577jk6ftrp19xfc27\n2. http://www.openwall.com/lists/oss-security/2022/11/15/3", "creation_timestamp": "2025-04-30T16:14:07.000000Z"}, {"uuid": "6f898b43-cf1a-4c19-9f47-7411dfabfb1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40308\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: If anonymous read enabled, it's possible to read the database file directly without logging in.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T16:03:13.651Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/x01pnn0jjsw512cscxsbxzrjmz64n4cc\n2. http://www.openwall.com/lists/oss-security/2022/11/15/2", "creation_timestamp": "2025-04-30T16:14:06.000000Z"}, {"uuid": "8a507127-4a64-430e-93aa-becf69d0c14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "Telegram/7-jNfTqQR0wKc_hRV_5bYMeXWa3n9sCd8vwj_DysxGDQ18AZ", "content": "", "creation_timestamp": "2025-10-07T16:22:31.000000Z"}, {"uuid": "777e1c95-8134-49a3-87d3-d45efdf19f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40208", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40208\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.\n\ud83d\udccf Published: 2023-03-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T18:56:04.388Z\n\ud83d\udd17 References:\n1. https://moodle.org/mod/forum/discuss.php?d=438761", "creation_timestamp": "2025-02-20T19:49:30.000000Z"}, {"uuid": "82d7cac0-6303-47e0-986d-e939e289b324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40224", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40224\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2023-02-07T16:52:03.607Z\n\ud83d\udccf Modified: 2025-03-05T19:27:11.797Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618\n2. https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities", "creation_timestamp": "2025-03-05T20:01:19.000000Z"}, {"uuid": "ea407a58-5a17-4a6a-9493-6c858d4edba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40903", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40903\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges.\n\ud83d\udccf Published: 2022-11-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T19:07:38.410Z\n\ud83d\udd17 References:\n1. https://jvn.jp/en/jp/JVN75437943/index.html\n2. https://www.aiphone.net/", "creation_timestamp": "2025-04-30T19:13:29.000000Z"}, {"uuid": "345aac78-72ea-4a41-b856-37f45ab5706f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4095", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5525", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4095\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.\n\ud83d\udccf Published: 2023-03-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T16:10:49.660Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c53b3dcb9942b8ed7f81ee3921c4085d87070c73\n2. https://security.netapp.com/advisory/ntap-20230420-0005/", "creation_timestamp": "2025-02-26T16:24:19.000000Z"}, {"uuid": "319c6ec8-37fe-472d-933e-0c29266a5b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40405", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40405\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.\n\ud83d\udccf Published: 2022-11-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T18:53:53.826Z\n\ud83d\udd17 References:\n1. https://github.com/nhiephon/Research", "creation_timestamp": "2025-04-30T19:13:47.000000Z"}, {"uuid": "b6e90f2e-c54b-4c64-a708-1525d61ca0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.\n\ud83d\udccf Published: 2022-11-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T18:58:45.160Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/25960\n2. https://lists.apache.org/thread/cf132hgm6jvzvsbpsozl3plf1r4cwysy\n3. http://www.openwall.com/lists/oss-security/2022/11/14/2", "creation_timestamp": "2025-04-30T19:13:45.000000Z"}, {"uuid": "c07626dd-e7d0-4391-8e08-f29097f2a5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40263", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40263\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.\n\ud83d\udccf Published: 2022-11-04T18:58:53.817Z\n\ud83d\udccf Modified: 2025-04-30T20:26:41.219Z\n\ud83d\udd17 References:\n1. https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-totalys-multiprocessor-hardcoded-credentials", "creation_timestamp": "2025-04-30T21:15:30.000000Z"}, {"uuid": "928495a6-fd37-49b3-a7d3-01d3c8d5f8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40752\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nIBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:\u00a0 236687.\n\ud83d\udccf Published: 2022-11-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:11:57.429Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6833566\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/236687", "creation_timestamp": "2025-03-06T20:34:09.000000Z"}, {"uuid": "7ab3caca-4a07-46c8-b24f-4ccd30424db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40080", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40080\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges.\n\ud83d\udccf Published: 2023-02-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T14:49:41.570Z\n\ud83d\udd17 References:\n1. https://acer.com/\n2. https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-40080/CVE-2022-40080.md", "creation_timestamp": "2025-03-19T15:17:52.000000Z"}, {"uuid": "646effb8-bcae-435e-81d4-0f6069b16e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40016", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8105", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40016\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in librtmp, allows attackers to cause a denial of service.\n\ud83d\udccf Published: 2023-02-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T18:02:17.996Z\n\ud83d\udd17 References:\n1. https://github.com/ireader/media-server/issues/235", "creation_timestamp": "2025-03-19T18:19:20.000000Z"}, {"uuid": "0592d04c-f822-4ba3-88a1-fdf12ca99ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40969", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9177", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40969\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2023-01-26T21:24:50.015Z\n\ud83d\udccf Modified: 2025-03-27T19:16:33.704Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1607", "creation_timestamp": "2025-03-27T19:26:48.000000Z"}, {"uuid": "9be58f19-5297-4c6a-9d8d-845140175483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40137\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.\n\ud83d\udccf Published: 2023-01-30T21:26:55.123Z\n\ud83d\udccf Modified: 2025-03-27T15:20:30.117Z\n\ud83d\udd17 References:\n1. https://support.lenovo.com/us/en/product_security/LEN-94953", "creation_timestamp": "2025-03-27T15:26:41.000000Z"}, {"uuid": "e9fbb563-02bb-49cb-8fa2-e9a340a30538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40994", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40994\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no firmwall keyword WORD description (WORD|null)' command template.\n\ud83d\udccf Published: 2023-01-26T21:24:38.340Z\n\ud83d\udccf Modified: 2025-03-28T16:08:53.111Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613", "creation_timestamp": "2025-03-28T16:28:07.000000Z"}, {"uuid": "cafd0b6a-263d-4ebd-b95e-47fbdff24a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4064\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.3 is able to address this issue. The patch is identified as 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2022-11-19T00:00:00\n\ud83d\udccf Modified: 2025-03-28T05:29:58.623Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.214026\n2. https://vuldb.com/?ctiid.214026\n3. https://github.com/petergoldstein/dalli/issues/932\n4. https://github.com/petergoldstein/dalli/pull/933\n5. https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d\n6. https://github.com/petergoldstein/dalli/releases/tag/v3.2.3\n7. https://github.com/advisories/GHSA-3xg8-cc8f-9wv2", "creation_timestamp": "2025-03-28T06:29:45.000000Z"}, {"uuid": "08c29821-00da-4326-8169-34609a5ec263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40992", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40992\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no firmwall domain WORD description (WORD|null)' command template.\n\ud83d\udccf Published: 2023-01-26T21:24:38.180Z\n\ud83d\udccf Modified: 2025-03-28T16:11:11.483Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613", "creation_timestamp": "2025-03-28T16:28:02.000000Z"}, {"uuid": "258750a5-8bfb-4ffb-aec8-73f647ac9d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40993", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9395", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40993\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'firmwall keyword WORD description (WORD|null)' command template.\n\ud83d\udccf Published: 2023-01-26T21:24:38.262Z\n\ud83d\udccf Modified: 2025-03-28T16:10:13.760Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613", "creation_timestamp": "2025-03-28T16:28:06.000000Z"}, {"uuid": "b9174be7-1440-4069-93c7-76ed42706954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40220", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9431", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40220\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2023-01-26T21:24:47.750Z\n\ud83d\udccf Modified: 2025-03-28T19:22:24.288Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1612", "creation_timestamp": "2025-03-28T19:28:53.000000Z"}, {"uuid": "7717fd25-fafe-48e8-885b-119bd472fdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40035\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:25:46.545Z\n\ud83d\udd17 References:\n1. https://github.com/rawchen/blog-ssm/issues/3", "creation_timestamp": "2025-04-01T15:32:47.000000Z"}, {"uuid": "81fed820-6719-49a7-8cc0-37b1338fdfa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4017", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10095", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4017\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for WooCommerce WordPress plugin before 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing attackers to make logged in users perform unwanted actions via CSRF attacks\n\ud83d\udccf Published: 2023-01-23T14:31:54.638Z\n\ud83d\udccf Modified: 2025-04-02T15:29:35.234Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/609072d0-9bb9-4fe0-9626-7e4a334ca3a4", "creation_timestamp": "2025-04-02T15:33:23.000000Z"}, {"uuid": "82a746e5-5232-4ad6-ae2c-b6325c223ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40655", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40655\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ND2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15071.\n\ud83d\udccf Published: 2022-09-15T15:26:31.000Z\n\ud83d\udccf Modified: 2025-04-03T14:24:35.663Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-22-1211/", "creation_timestamp": "2025-04-03T14:35:01.000000Z"}, {"uuid": "8bf3a91f-6607-4b6b-ae43-5ecf80ed00cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. (Visiting any .phar file invokes the PHP interpreter in some realistic web-server configurations.)\n\ud83d\udccf Published: 2022-11-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T15:51:32.573Z\n\ud83d\udd17 References:\n1. https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6\n2. https://gist.github.com/Hadi999/1f66fe7c5a217ca261ebfec36c630d18\n3. https://web.archive.org/web/20210126213412/https://roxyfileman.com/download.php?f=1.4.6-php\n4. http://packetstormsecurity.com/files/169964/Roxy-Fileman-1.4.6-Remote-Shell-Upload.html", "creation_timestamp": "2025-05-01T16:14:39.000000Z"}, {"uuid": "dd7935c1-e6ce-422d-83a3-4b38c1f90e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4037", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4037\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeover of third-party accounts when using GitLab as an OAuth provider.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T16:22:03.062Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/382957\n2. https://hackerone.com/reports/1772543\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4037.json", "creation_timestamp": "2025-04-08T16:46:33.000000Z"}, {"uuid": "d65bd6c8-176a-49b8-8148-4f53f06fbde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40520", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11140", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40520\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Memory corruption due to stack-based buffer overflow in Core\n\ud83d\udccf Published: 2023-01-06T05:02:40.967Z\n\ud83d\udccf Modified: 2025-04-09T19:38:01.701Z\n\ud83d\udd17 References:\n1. https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin", "creation_timestamp": "2025-04-09T19:48:12.000000Z"}, {"uuid": "fae76504-9a47-4c14-8e62-242d85bf407c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40519\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)\n\ud83d\udd39 Description: Information disclosure due to buffer overread in Core\n\ud83d\udccf Published: 2023-01-06T05:02:39.601Z\n\ud83d\udccf Modified: 2025-04-09T14:38:16.819Z\n\ud83d\udd17 References:\n1. https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin", "creation_timestamp": "2025-04-09T14:48:18.000000Z"}, {"uuid": "3d33acb7-1800-4d3f-8729-7c646e4ceacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4099", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4099\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection\n\ud83d\udccf Published: 2023-01-02T21:49:32.669Z\n\ud83d\udccf Modified: 2025-04-10T18:39:36.591Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a282dd39-926d-406b-b8f5-e4c6e0c2c028", "creation_timestamp": "2025-04-10T18:49:25.000000Z"}, {"uuid": "20dc8202-143a-485b-880c-f26e5df2170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "6ee9e13f-36b0-4f5e-9d78-e2bcb1d4f097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4047", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4047\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE\n\ud83d\udccf Published: 2022-12-26T12:28:13.684Z\n\ud83d\udccf Modified: 2025-04-14T13:47:55.922Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94", "creation_timestamp": "2025-04-14T13:54:49.000000Z"}, {"uuid": "d0292792-8b00-4eb0-bd4b-0ccdcb3d31f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4097", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11677", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4097\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).\n\ud83d\udccf Published: 2022-12-12T17:54:35.126Z\n\ud83d\udccf Modified: 2025-04-14T18:38:47.786Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4", "creation_timestamp": "2025-04-14T18:54:05.000000Z"}, {"uuid": "e59df039-2e17-4e2b-82b8-bb986c606977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4042", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11513", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4042\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2022-12-26T12:27:59.379Z\n\ud83d\udccf Modified: 2025-04-11T23:24:21.176Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8ec76242-717d-4d2d-9c0f-3056cd7c2c90", "creation_timestamp": "2025-04-11T23:51:22.000000Z"}, {"uuid": "143cdfed-0a92-491d-948f-ad6e87dbd792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40005", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11682", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40005\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.\n\ud83d\udccf Published: 2022-12-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T18:34:50.044Z\n\ud83d\udd17 References:\n1. https://cyberdanube.com/en/authenticated-command-injection-in-intelbras-wifiber-120ac-inmesh/\n2. https://seclists.org/fulldisclosure/2022/Dec/13", "creation_timestamp": "2025-04-14T18:54:13.000000Z"}, {"uuid": "c36a8392-bb57-4541-a892-aebfbc71e6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40233\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service.  IBM X-Force ID:  235599.\n\ud83d\udccf Published: 2022-12-23T18:42:55.351Z\n\ud83d\udccf Modified: 2025-04-15T13:48:36.778Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6847947\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/235599", "creation_timestamp": "2025-04-15T13:54:24.000000Z"}, {"uuid": "356c6450-4ddb-416c-b253-b7c2b563a495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40899", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40899\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.\n\ud83d\udccf Published: 2022-12-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T15:52:06.467Z\n\ud83d\udd17 References:\n1. https://pypi.org/project/future/\n2. https://github.com/PythonCharmers/python-future/blob/master/src/future/backports/http/cookiejar.py#L215\n3. https://github.com/python/cpython/pull/17157\n4. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/\n5. https://github.com/PythonCharmers/python-future/pull/610", "creation_timestamp": "2025-04-15T15:54:36.000000Z"}, {"uuid": "6d158ad4-39dd-496f-8d4d-9f1a64ea8a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4050\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users\n\ud83d\udccf Published: 2022-12-19T13:41:51.720Z\n\ud83d\udccf Modified: 2025-04-17T13:40:47.282Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5c96bb40-4c2d-4e91-8339-e0ddce25912f", "creation_timestamp": "2025-04-17T13:57:55.000000Z"}, {"uuid": "8360b7c9-7219-41c3-a438-0586021c40ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40607", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40607\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nIBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.\n\n\n\ud83d\udccf Published: 2022-12-19T19:36:28.395Z\n\ud83d\udccf Modified: 2025-04-17T13:40:06.251Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6848231\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/235740", "creation_timestamp": "2025-04-17T13:57:56.000000Z"}, {"uuid": "e01d7dee-e5ef-4f0e-813d-4164475ca3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40000", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40000\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T15:17:10.650Z\n\ud83d\udd17 References:\n1. https://github.com/liufee/cms/issues/64", "creation_timestamp": "2025-04-21T16:03:11.000000Z"}, {"uuid": "463e0087-a4e8-47bf-aec9-2f161a7b8dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40304", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40304\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.\n\ud83d\udccf Published: 2022-11-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:49:17.691Z\n\ud83d\udd17 References:\n1. https://gitlab.gnome.org/GNOME/libxml2/-/tags\n2. https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3\n3. https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b\n4. https://security.netapp.com/advisory/ntap-20221209-0003/\n5. https://support.apple.com/kb/HT213534\n6. https://support.apple.com/kb/HT213533\n7. https://support.apple.com/kb/HT213531\n8. https://support.apple.com/kb/HT213536\n9. https://support.apple.com/kb/HT213535\n10. http://seclists.org/fulldisclosure/2022/Dec/21\n11. http://seclists.org/fulldisclosure/2022/Dec/25\n12. http://seclists.org/fulldisclosure/2022/Dec/26\n13. http://seclists.org/fulldisclosure/2022/Dec/24\n14. http://seclists.org/fulldisclosure/2022/Dec/27", "creation_timestamp": "2025-04-28T20:11:15.000000Z"}, {"uuid": "8652f968-49a4-42f8-a0a0-1fb31ec8f1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "67581ec0-d855-4652-8f77-afcf142193c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "a02a718d-3700-4de4-a846-3e93904b4ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "68e7efd8-0c57-4788-9a0b-5bf1ea8ca97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40373", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40373\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T14:41:15.356Z\n\ud83d\udd17 References:\n1. https://github.com/liufee/cms/issues/67", "creation_timestamp": "2025-04-21T15:02:57.000000Z"}, {"uuid": "ea779ec5-d5de-44ec-947b-a70be723f30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4000", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12867", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4000\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2022-12-12T17:54:56.948Z\n\ud83d\udccf Modified: 2025-04-22T14:48:02.131Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5563c030-bd62-4839-98e8-84bc8191e242", "creation_timestamp": "2025-04-22T15:03:46.000000Z"}, {"uuid": "7a7ecc6a-bdbd-4525-bc1b-cfa11d101131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13049", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40259\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: MegaRAC Default Credentials Vulnerability\n\ud83d\udccf Published: 2022-12-05T21:33:13.256Z\n\ud83d\udccf Modified: 2025-04-23T14:54:39.659Z\n\ud83d\udd17 References:\n1. https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf", "creation_timestamp": "2025-04-23T15:04:36.000000Z"}, {"uuid": "10394558-031e-4bd9-8013-243862dde8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40939", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40939\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.\n\ud83d\udccf Published: 2022-12-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T20:28:12.850Z\n\ud83d\udd17 References:\n1. https://cdsbz.gitbook.io/untitled/secustion-camera-vulnerability-recurrence", "creation_timestamp": "2025-04-22T21:04:25.000000Z"}, {"uuid": "b624131b-a8b6-4636-9fb2-c717428b95f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\ud83d\udccf Published: 2022-12-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T20:23:24.602Z\n\ud83d\udd17 References:\n1. https://github.com/thinkcmf/thinkcmf/issues/737", "creation_timestamp": "2025-04-24T21:07:26.000000Z"}, {"uuid": "5f5c6c98-9309-4d4a-8446-adf8707bef26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40489", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13355", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40489\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.\n\ud83d\udccf Published: 2022-12-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T20:24:55.671Z\n\ud83d\udd17 References:\n1. https://github.com/thinkcmf/thinkcmf/issues/736", "creation_timestamp": "2025-04-24T21:07:26.000000Z"}, {"uuid": "a88c20b1-6cac-4565-95a7-8e23a0a151dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40603", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40603\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim\u2019s browser.\n\ud83d\udccf Published: 2022-12-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T20:00:23.891Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls", "creation_timestamp": "2025-04-23T20:04:40.000000Z"}, {"uuid": "4901fe36-6783-49ca-9ef6-2ec1b275b282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40183", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14975", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40183\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.\n\ud83d\udccf Published: 2022-10-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:04:45.654Z\n\ud83d\udd17 References:\n1. https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html", "creation_timestamp": "2025-05-05T19:20:38.000000Z"}, {"uuid": "2aa7f094-b283-46ef-8140-fc6ced537c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40290", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40290\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: \nThe application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users.\n\n\n\ud83d\udccf Published: 2022-10-31T20:09:06.555Z\n\ud83d\udccf Modified: 2025-05-06T19:11:44.820Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2022-40290", "creation_timestamp": "2025-05-06T19:20:59.000000Z"}, {"uuid": "498c027e-c384-4e28-980a-530d281a3e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40287", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40287\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: \nThe application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality,\u00a0leading to privilege escalation or a compromise of a targeted account.\n\n\n\ud83d\udccf Published: 2022-10-31T20:08:11.893Z\n\ud83d\udccf Modified: 2025-05-06T19:13:46.860Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2022-40287", "creation_timestamp": "2025-05-06T19:20:58.000000Z"}, {"uuid": "1e162a6d-aab8-4c18-b2ad-f4f314b33b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40839", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15132", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40839\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T15:13:40.240Z\n\ud83d\udd17 References:\n1. http://ndk.com\n2. http://ndkadvancedcustomizationfields.com\n3. https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40839/poc.txt", "creation_timestamp": "2025-05-06T15:21:29.000000Z"}, {"uuid": "f1b881cb-920c-4480-92fc-fe48aace0390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40984", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40984\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product to crash by processing a long file name.\n\ud83d\udccf Published: 2022-10-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-07T16:05:21.274Z\n\ud83d\udd17 References:\n1. https://cdn.aff.yokogawa.com/8/756/details/Vulnerability_in_YOKOGAWA_application_software_WTViewerE_r0_e.pdf\n2. https://jvn.jp/en/vu/JVNVU99955870/index.html", "creation_timestamp": "2025-05-07T16:23:08.000000Z"}, {"uuid": "b18563cf-7134-493d-9961-1b668dad6056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16401", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:08:42.532Z\n\ud83d\udd17 References:\n1. https://boschko.ca/tenda_ac1200_router/", "creation_timestamp": "2025-05-14T20:32:30.000000Z"}, {"uuid": "d430f460-9c7e-4980-b536-b02f9e6d2163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40184\n\ud83d\udd25 CVSS Score: 5.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.\n\ud83d\udccf Published: 2022-10-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T19:15:40.818Z\n\ud83d\udd17 References:\n1. https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html", "creation_timestamp": "2025-05-09T19:26:10.000000Z"}, {"uuid": "ff639d14-286a-4bd7-b421-cb23120a978e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40055", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16393", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40055\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page.\n\ud83d\udccf Published: 2022-10-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:24:25.249Z\n\ud83d\udd17 References:\n1. http://gpon.com\n2. http://gx.com\n3. https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055", "creation_timestamp": "2025-05-14T20:32:21.000000Z"}, {"uuid": "2312eefb-f0e6-46ab-a1e2-25c7e24ff5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40277", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40277\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the 'shell.openExternal' function.\n\ud83d\udccf Published: 2022-09-30T16:20:59.000Z\n\ud83d\udccf Modified: 2025-05-20T18:32:21.014Z\n\ud83d\udd17 References:\n1. https://fluidattacks.com/advisories/skrillex/\n2. https://github.com/laurent22/joplin", "creation_timestamp": "2025-05-20T18:42:24.000000Z"}, {"uuid": "fd5e8480-c0b8-430f-9015-83ecb4d8e62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40934", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40934\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id\n\ud83d\udccf Published: 2022-09-22T16:05:38.000Z\n\ud83d\udccf Modified: 2025-05-27T15:41:58.615Z\n\ud83d\udd17 References:\n1. https://github.com/lime-10010/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-3.md", "creation_timestamp": "2025-05-27T15:49:12.000000Z"}, {"uuid": "bc3b258f-5f13-4b59-9349-04460e73350c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40944", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40944\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.\n\ud83d\udccf Published: 2022-09-30T17:11:04.000Z\n\ud83d\udccf Modified: 2025-05-20T16:12:19.405Z\n\ud83d\udd17 References:\n1. https://phpgurukul.com/dairy-farm-shop-management-system-using-php-and-mysql/\n2. https://caicaizi.top/archives/9/\n3. https://github.com/Qrayyy/CVE/blob/main/Dairy%20Farm%20Shop%20Management%20System/sales-report-ds-sql%28CVE-2022-40944%29.md", "creation_timestamp": "2025-05-20T16:40:51.000000Z"}, {"uuid": "84a11f4d-d018-4652-9c83-d83cd6109f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40102\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\ud83d\udccf Published: 2022-09-23T18:54:30.000Z\n\ud83d\udccf Modified: 2025-05-22T17:38:59.037Z\n\ud83d\udd17 References:\n1. https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDset.md", "creation_timestamp": "2025-05-22T17:43:18.000000Z"}, {"uuid": "b24d40f2-b1e6-4c99-9fa0-a4d701b140e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40708", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40708\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.\n\ud83d\udccf Published: 2022-09-28T21:10:23.000Z\n\ud83d\udccf Modified: 2025-05-20T20:27:37.351Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/solution/000291590\n2. https://www.zerodayinitiative.com/advisories/ZDI-22-1298/", "creation_timestamp": "2025-05-20T20:41:12.000000Z"}, {"uuid": "ae26d6c5-f814-418a-a4a1-4e35a2b4c134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40707", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40708\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.\n\ud83d\udccf Published: 2022-09-28T21:10:23.000Z\n\ud83d\udccf Modified: 2025-05-20T20:27:37.351Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/solution/000291590\n2. https://www.zerodayinitiative.com/advisories/ZDI-22-1298/", "creation_timestamp": "2025-05-20T20:41:12.000000Z"}, {"uuid": "0b3994fc-d7c6-4ad3-927b-1754bffff9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40912", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40912\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site.\n\ud83d\udccf Published: 2022-09-28T13:50:27.000Z\n\ud83d\udccf Modified: 2025-05-20T20:20:26.356Z\n\ud83d\udd17 References:\n1. https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5711.php", "creation_timestamp": "2025-05-20T20:41:17.000000Z"}, {"uuid": "99bef35e-bfda-4f98-bc8d-0291afd8b9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40103", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40103\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\ud83d\udccf Published: 2022-09-23T18:54:30.000Z\n\ud83d\udccf Modified: 2025-05-22T17:36:32.736Z\n\ud83d\udd17 References:\n1. https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formSetAutoPing.md", "creation_timestamp": "2025-05-22T17:43:27.000000Z"}, {"uuid": "43a5eed0-e5fa-435e-a741-aebd1b63cc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40475", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40475\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.\n\ud83d\udccf Published: 2022-09-29T11:37:10.000Z\n\ud83d\udccf Modified: 2025-05-21T14:21:27.445Z\n\ud83d\udd17 References:\n1. https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/6.md", "creation_timestamp": "2025-05-21T14:53:34.000000Z"}, {"uuid": "210b3698-2e8a-47d7-8ab2-d39a740be0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40122", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40122\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer_action.php.\n\ud83d\udccf Published: 2022-09-23T21:16:12.000Z\n\ud83d\udccf Modified: 2025-05-22T14:16:36.182Z\n\ud83d\udd17 References:\n1. https://github.com/zakee94/online-banking-system/issues/15\n2. https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection10.md", "creation_timestamp": "2025-05-22T14:44:45.000000Z"}, {"uuid": "21f1b440-b78d-4b4f-8a43-1de109f24d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40106", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40106\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\ud83d\udccf Published: 2022-09-23T18:54:33.000Z\n\ud83d\udccf Modified: 2025-05-22T16:03:41.445Z\n\ud83d\udd17 References:\n1. https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md", "creation_timestamp": "2025-05-22T16:44:11.000000Z"}, {"uuid": "7d32db7a-e465-46ed-a4a4-ef114b9d5318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40933", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40933\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id.\n\ud83d\udccf Published: 2022-09-22T16:03:23.000Z\n\ud83d\udccf Modified: 2025-05-27T15:47:18.158Z\n\ud83d\udd17 References:\n1. https://github.com/lime-10010/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-1.md", "creation_timestamp": "2025-05-27T16:53:16.000000Z"}, {"uuid": "2dee281e-2f25-426c-adf9-4d5783e43566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40444", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17667", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40444\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.\n\ud83d\udccf Published: 2022-09-22T13:32:35.000Z\n\ud83d\udccf Modified: 2025-05-27T16:14:39.393Z\n\ud83d\udd17 References:\n1. https://github.com/liong007/ZZCMS/issues/2", "creation_timestamp": "2025-05-27T16:52:55.000000Z"}, {"uuid": "1ad88f9d-69e4-4e14-90bb-47d5b8cde28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40443", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17666", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40443\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.\n\ud83d\udccf Published: 2022-09-22T13:32:34.000Z\n\ud83d\udccf Modified: 2025-05-27T16:15:21.257Z\n\ud83d\udd17 References:\n1. https://github.com/liong007/ZZCMS/issues/1", "creation_timestamp": "2025-05-27T16:52:51.000000Z"}, {"uuid": "e7f6a294-6e29-4d10-a199-98a4ba6e32e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40869\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\ud83d\udccf Published: 2022-09-23T13:32:22.000Z\n\ud83d\udccf Modified: 2025-05-27T14:44:13.104Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromDhcpListClient-list.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromDhcpListClient-list.md", "creation_timestamp": "2025-05-27T14:48:22.000000Z"}, {"uuid": "f5142fbd-723c-412f-a4b1-d9cc53efb853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17636", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40865\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\ud83d\udccf Published: 2022-09-23T13:35:42.000Z\n\ud83d\udccf Modified: 2025-05-27T14:43:34.801Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSchedWifi.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSchedWifi.md", "creation_timestamp": "2025-05-27T14:48:23.000000Z"}, {"uuid": "cfca804b-92df-4588-ad54-af6645bbd329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40932", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40932\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the \"gallery\" file of the \"Gallery\" module in the background management system.\n\ud83d\udccf Published: 2022-09-22T15:59:43.000Z\n\ud83d\udccf Modified: 2025-05-27T15:49:35.921Z\n\ud83d\udd17 References:\n1. https://github.com/lime-10010/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md", "creation_timestamp": "2025-05-27T16:53:13.000000Z"}, {"uuid": "b61c37f3-8b64-45b9-a332-69194a4311c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40935", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17658", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40935\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.\n\ud83d\udccf Published: 2022-09-22T16:07:07.000Z\n\ud83d\udccf Modified: 2025-05-27T15:39:57.626Z\n\ud83d\udd17 References:\n1. https://github.com/lime-10010/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-2.md", "creation_timestamp": "2025-05-27T15:49:15.000000Z"}, {"uuid": "386d014e-3165-4f10-be75-5e328852dee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40447", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17677", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40447\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.\n\ud83d\udccf Published: 2022-09-22T13:32:37.000Z\n\ud83d\udccf Modified: 2025-05-27T15:52:29.673Z\n\ud83d\udd17 References:\n1. https://github.com/liong007/ZZCMS/issues/5", "creation_timestamp": "2025-05-27T16:53:11.000000Z"}, {"uuid": "29908546-7428-4a35-a703-f6f44c6405d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40446", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40446\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.\n\ud83d\udccf Published: 2022-09-22T13:32:36.000Z\n\ud83d\udccf Modified: 2025-05-27T15:56:37.792Z\n\ud83d\udd17 References:\n1. https://github.com/liong007/ZZCMS/issues/4", "creation_timestamp": "2025-05-27T16:53:06.000000Z"}, {"uuid": "5c33c07e-7efe-44eb-b58e-b56802e46a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18677", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40696\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.\n\n\n\ud83d\udccf Published: 2024-01-08T22:02:53.269Z\n\ud83d\udccf Modified: 2025-06-17T20:29:15.877Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/advanced-custom-fields/wordpress-advanced-custom-fields-plugin-3-1-1-6-0-2-custom-field-value-exposure?_s_id=cve", "creation_timestamp": "2025-06-17T20:40:13.000000Z"}, {"uuid": "36f4dfe2-efd9-4664-bf52-e4218423a304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40361", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18632", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40361\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T17:23:37.149Z\n\ud83d\udd17 References:\n1. https://elitecrm.co/\n2. https://hazemhussien99.wordpress.com/2024/01/07/cve-2022-40361-disclosure/", "creation_timestamp": "2025-06-17T17:42:12.000000Z"}, {"uuid": "6669101c-8c18-4cfa-b2ba-6b66f73ab43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/ics_cert/624", "content": "\ud83d\udea8\u0647\u0634\u062f\u0627\u0631 \n\u0634\u0631\u06a9\u062a Fortinet \u0628\u0647 \u0637\u0648\u0631 \u062e\u0635\u0648\u0635\u06cc \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0647\u0627\u06cc FortiGate \u0648 \u0648\u0628 \u067e\u0631\u0648\u06a9\u0633\u06cc FortiProxy \u0631\u0627 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \nCVE-2022-40684 \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.6 \u0627\u0633\u062a \u0648 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u06cc \u067e\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u06cc\u0627 HTTPS \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u0639\u0645\u0644\u06cc\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u062f\u0631 \u0631\u0627\u0628\u0637 \u0627\u062f\u0627\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f. \u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0628\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631 FortiOS \u0627\u0632 7.0.0 \u062a\u0627 7.0.6 \u0648 7.2.0 \u062a\u0627 7.2.1\u060c FortiProxy \u0627\u0632 7.0.0 \u062a\u0627 7.0.6 \u0648 7.2.0 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f. \n\u0634\u0631\u06a9\u062a Fortinet \u0627\u0641\u0634\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u062c\u0632\u0626\u06cc\u0627\u062a \u062d\u0645\u0644\u0627\u062a\u06cc \u06a9\u0647 \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0631\u0627 \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u0634 \u0648\u0635\u0644\u0647\u200c\u0647\u0627 \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f\u060c \u0628\u0647 \u062a\u0639\u0648\u06cc\u0642 \u0645\u06cc\u200c\u0627\u0646\u062f\u0627\u0632\u062f. \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 FortiOS 7.0.7 \u0648 7.2.2 \u0648 FortiProxy 7.0.7 \u0648 7.2.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u067e\u062a\u0627\u0646\u0633\u06cc\u0644 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0648 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0628\u0648\u062f\u0646 \u0628\u06cc\u0634 \u0627\u0632 100000 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 FortiGate \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u062c\u0633\u062a\u062c\u0648\u06cc Shodan\u060c Fortinet \u0642\u0648\u06cc\u0627\u064b \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0647\u0645\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0641\u0648\u0631\u0627\u064b \u0622\u0646 \u0631\u0627 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f. \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0631\u0627\u0647\u200c\u062d\u0644 \u0645\u0648\u0642\u062a\u060c \u0641\u0648\u0631\u062a\u06cc\u200c\u0646\u062a \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u062f\u06cc\u0631\u06cc\u062a HTTPS \u0631\u0648\u06cc \u0648\u0628 \u0631\u0627 \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0646\u0635\u0628 \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0646\u0646\u062f\u060c \u06cc\u0627 \u0622\u062f\u0631\u0633\u200c\u0647\u0627\u06cc IP \u0631\u0627 \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062e\u0637\u200c\u0645\u0634\u06cc \u0645\u062d\u0644\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u0627\u062f\u0627\u0631\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f\u060c \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-10-12T19:54:31.000000Z"}, {"uuid": "9ee532c1-22ba-4a35-bc96-33daa5452eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4048", "type": "seen", "source": "https://t.me/ics_cert/664", "content": "\u0647\u0634\u062f\u0627\u0631 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0635\u0646\u0639\u062a\u06cc \n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u062c\u0632\u0626\u06cc\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0631\u0627 \u0641\u0627\u0634 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0641\u0646\u0627\u0648\u0631\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc (OT) CODESYS \u0648 Festo \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u062f \u0645\u0646\u0628\u0639 \u0648 \u0627\u0646\u06a9\u0627\u0631 \u0633\u0631\u0648\u06cc\u0633 (DoS) \u0634\u0648\u062f.\n\n\u0645\u062a\u062e\u0635\u0635\u0627\u0646 Forescout Vedere Labs \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0634\u06a9\u0644\u0627\u062a \u0622\u0646 \u0635\u062d\u0628\u062a \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06cc\u06a9 \u0648\u0627\u06af\u0646 \u0648 \u06cc\u06a9 \u0648\u0627\u06af\u0646 \u06a9\u0648\u0686\u06a9\u060c \u0648 \u0628\u0627 \u0633\u0647\u0645 \u0634\u06cc\u0631 \u0627\u0632 \u0627\u0646\u062a\u0642\u0627\u062f \u0627\u0632 \u062a\u0627\u0645\u06cc\u0646 \u06a9\u0646\u0646\u062f\u06af\u0627\u0646.\n\n\u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u06af\u0641\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u0627\u062a \u06cc\u0627 \u06cc\u06a9 \u0631\u0648\u06cc\u06a9\u0631\u062f \u0646\u0627\u0627\u0645\u0646 \u062f\u0631 \u0637\u0631\u0627\u062d\u06cc \u0645\u062d\u0635\u0648\u0644 \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062a\u0648\u0644\u06cc\u062f \u06a9\u0646\u0646\u062f\u06af\u0627\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9\u06cc \u0631\u0627 \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u0622\u0646\u0647\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u060c \u06cc\u0627 \u0627\u062c\u0631\u0627\u06cc \u0636\u0639\u06cc\u0641 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f.\n\n\u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2022-3270 (\u0627\u0645\u062a\u06cc\u0627\u0632 CVSS: 9.8) \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 Festo \u06a9\u0647 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644 Festo Generic Multicast (FGMC) \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686\u200c\u06af\u0648\u0646\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u0648 \u0627\u062c\u0627\u0632\u0647 \u0627\u0646\u06a9\u0627\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u0646\u0642\u0635 \u0647\u0627\u06cc DoS \u0646\u06cc\u0632 \u0628\u0631 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627\u06cc Festo \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f (CVE-2022-3079\u060c \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS: 7.5) \u0648 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0648\u0628 \u063a\u06cc\u0631\u0645\u0633\u062a\u0646\u062f (\"cec-reboot.php\") \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f. \u0645\u0647\u0627\u062c\u0645 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0647\u0627\u06cc Festo CPX-CEC-C1 \u0648 CPX-CMXX \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647.\n\n\u0633\u0648\u0645\u06cc\u0646 \u0645\u0633\u0626\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0636\u0639\u06cc\u0641 \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u062c\u0631\u0627 CODESYS V3 \u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0648 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06a9\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0634\u0646\u0627\u0633\u0647 CVE-2022-4048 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 7.7 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u062c\u0627\u0632\u0647 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u062f \u0645\u0646\u0628\u0639 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0628\u0648\u062f\u0646 \u0648 \u062d\u0641\u0627\u0638\u062a \u0627\u0632 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0631\u0627 \u062a\u0636\u0639\u06cc\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nForescout \u0628\u06cc\u0627\u0646 \u06a9\u0631\u062f \u06a9\u0647 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0648 \u0628\u0627\u06af CODESYS \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc Festo CPX-CEC-C1 (CVE-2022-31806 \u0648 CVE-2022-22515) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u0646\u062f \u06a9\u0647 \u0628\u0647 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0646\u0627\u0627\u0645\u0646 \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u062c\u0631\u0627 Control \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u06a9\u0647 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062e\u0631\u0627\u0628\u06cc \u0634\u0648\u062f.\n\n\u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0628\u0627\u0644\u0642\u0648\u0647\u060c \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062a\u0634\u0648\u06cc\u0642 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0631\u0641\u0639 \u0645\u0634\u06a9\u0644 \u06a9\u0646\u0646\u062f \u0648 \u0642\u0648\u0627\u0646\u06cc\u0646 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0628\u06a9\u0647 \u0648 \u0628\u062e\u0634\u200c\u0628\u0646\u062f\u06cc \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u0646\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc \u0646\u0638\u0627\u0631\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-12-01T20:15:38.000000Z"}, {"uuid": "12d130f1-5426-4253-864c-5a2c4a772daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "Telegram/xFDzsLWCurHXjW4F4yEm6tQbHAhX5q3dlIa8C67O-q2Kqg", "content": "", "creation_timestamp": "2025-01-25T02:41:03.000000Z"}, {"uuid": "fed32328-d127-4f7f-8ecb-60f097918f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/ddos_guard/604", "content": "\u200b\u0423\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Belsen Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 1.6 \u0413\u0411 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u043e\u043b\u0435\u0435 15 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u0430\u043c.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0435\u0432\u0438\u043d \u0411\u043e\u043c\u043e\u043d\u0442 \u0438\u0437\u0443\u0447\u0438\u043b \u043e\u0434\u043d\u043e \u0438\u0437 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0438\u0437 \u0434\u0430\u043c\u043f\u0430 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0422\u0430\u043a\u0436\u0435 \u0411\u043e\u043c\u043e\u043d\u0442 \u0437\u0430\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2022-40684.\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u0430 2022 \u0433\u043e\u0434. \u041d\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.", "creation_timestamp": "2025-01-17T11:08:42.000000Z"}, {"uuid": "39dc00e3-2f69-4950-a2bb-fd4aaa44c29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/malwar3s/40", "content": "https://github.com/horizon3ai/CVE-2022-40684", "creation_timestamp": "2023-03-19T19:21:16.000000Z"}, {"uuid": "6f07538b-6ef6-4639-b9f3-efda3705372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/182", "content": "Top Security News for 19/10/2022\n\nAltruism under attack: why cybersecurity has become essential to humanitarian nonprofits\nhttps://www.csoonline.com/article/3676668/altruism-under-attack-why-cybersecurity-has-become-essential-to-humanitarian-nonprofits.html#tk.rss_all \n\nCVE-2022-42889 (Text4Shell) OSS detector - Finds possibly vulnerable JAR files\nhttps://www.reddit.com/r/netsec/comments/y7aohf/cve202242889_text4shell_oss_detector_finds/ \n\nFake tractor fraudsters plague online transactions\nhttps://www.malwarebytes.com/blog/news/2022/10/fake-tractor-fraudsters-plague-online-transactions \n\nISC StormCast for Wednesday, October 19th, 2022\nhttps://isc.sans.edu/podcastdetail.html?id=8220 \n\nData Collection\nhttps://malware.news/t/data-collection/64276#post_1 \n\nCVE-2022-28762: Zoom for macOS contains a debugging port misconfiguration\nhttps://securityaffairs.co/wordpress/137266/security/zoom-macos-cve-2022-28762.html \n\nFortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) + PoC\nhttps://www.reddit.com/r/netsec/comments/y3lgv3/fortios_fortiproxy_and_fortiswitchmanager/ \n\nOur new scanner for Text4Shell\nhttps://www.reddit.com/r/netsec/comments/y7gf09/our_new_scanner_for_text4shell/ \n\nSecurity Alert: Oracle Releases Critical Patch Update, October 2022\nhttps://malware.news/t/security-alert-oracle-releases-critical-patch-update-october-2022/64278#post_1 \n\nHow to spot a scam\nhttps://malware.news/t/how-to-spot-a-scam/64274#post_1 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2022-10-19T07:00:05.000000Z"}, {"uuid": "9b2ec89e-7b0a-4d52-9978-b06e29a42f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/poxek/2529", "content": "#cve\n\nCVE-2022-40684\n\n\u0412 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet (FortiOS, FortiProxy \u0438 FortiSwitchManager) \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e LDAP, \u043f\u0443\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\n\n\u0412\u0441\u0435 \u043d\u0443\u0436\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b:\n\ud83d\udd38https://github.com/carlosevieira/CVE-2022-40684\n\ud83d\udd38https://www.usergate.com/ru/security-reports/CVE-2022-40684", "creation_timestamp": "2022-10-15T09:16:55.000000Z"}, {"uuid": "a8ceb53e-550c-4cb3-a061-603ec2e443de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/arm1tage/375", "content": "Fortinet \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate \u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684\u00a0\u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,6 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 HTTP \u0438\u043b\u0438 HTTPS.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS \u0441 7.0.0 \u0434\u043e 7.0.6 \u0438 \u0441 7.2.0 \u0434\u043e 7.2.1, FortiProxy \u0441 7.0.0 \u043d\u0430 7.0.6 \u0438 7.2.0. Fortinet \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0441 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 FortiOS 7.0.7\u00a0\u0438\u00a07.2.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445\u00a0FortiProxy 7.0.7\u00a0\u0438\u00a07.2.1. \n\n\u041f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u043f\u043e\u0438\u0441\u043a\u0443 Shodan, \u0431\u043e\u043b\u0435\u0435 100 000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 FortiGate \u0432 \u0441\u0435\u0442\u0438, Fortinet \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 HTTPS \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u043b\u0438, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438.", "creation_timestamp": "2022-10-13T21:08:35.000000Z"}, {"uuid": "296b95de-af5d-4dda-a841-54f877c8eb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/arm1tage/376", "content": "\u200b\u200b\ud83d\udd13 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager\n\nFortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate \u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy (CVE-2022-40684)\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u043f\u043e \u0441\u0443\u0442\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c \u043d\u0438\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0448\u0430\u0431\u043b\u043e\u043d \u0434\u043b\u044f Nuclei \u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\n\u041f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0432 Shodan. \u041e\u043a\u043e\u043b\u043e 160\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0434\u043e\u0440\u043a\u0443:\n\nproduct:\"Fortinet FortiGate\"\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0441\u0442\u0430\u0442\u044c\u044e\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC\n\n#web #rce", "creation_timestamp": "2023-01-10T18:22:49.000000Z"}, {"uuid": "28089a43-0d65-4cf9-892f-4eb3b58a4b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/monkey_hacker/25", "content": "#cve\n\nCVE-2022-40684\n\n\u0412 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet (FortiOS, FortiProxy \u0438 FortiSwitchManager) \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e LDAP, \u043f\u0443\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\n\n\u0412\u0441\u0435 \u043d\u0443\u0436\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b:\n\ud83d\udd38https://github.com/carlosevieira/CVE-2022-40684\n\ud83d\udd38https://www.usergate.com/ru/security-reports/CVE-2022-40684", "creation_timestamp": "2022-11-11T07:59:15.000000Z"}, {"uuid": "54c7dbba-34f4-4a44-8a51-340cd3723c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/itsec_news/5534", "content": "\u200b\u26a1\ufe0f10 \u0438\u0437 10: CVE-2024-54085 \u0438\u0441\u043f\u0435\u043f\u0435\u043b\u044f\u0435\u0442 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439\n\n\ud83d\udcac \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u043c American Megatrends International (AMI), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0445 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 MegaRAC BMC \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f HPE, Asus, ASRock \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (10 \u0438\u0437 10) \u0438 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2024-54085 , \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439. \u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Redfish, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 BMC.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c: \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0434\u0430\u0436\u0435 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u044b (BMC, BIOS/UEFI) \u0438\u043b\u0438 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 AMI \u0434\u043b\u044f CVE-2023-34329 , \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2014 HPE Cray XD670, Asus RS720A-E11-RS24U \u0438 ASRockRack, \u043d\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Shodan, \u0431\u043e\u043b\u0435\u0435 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c. \u041f\u0440\u0438\u0447\u0451\u043c CVE-2024-54085 \u2014 \u043d\u0435 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 MegaRAC BMC. \u0421 2022 \u0433\u043e\u0434\u0430 Eclypsium \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 CVE-2022-40259 , CVE-2022-40242 , CVE-2022-2827 , CVE-2022-26872 \u0438 CVE-2022-40258 . \u042d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 BMC, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-34330 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Redfish. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, CVE-2022-40258 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u0445\u0435\u0448\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 BMC \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439.\n\n\u0425\u043e\u0442\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-54085 , \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0441\u043e\u0431\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 11 \u043c\u0430\u0440\u0442\u0430 AMI, Lenovo \u0438 HPE, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0434\u043e\u0441\u0442\u0443\u043f \u043a MegaRAC BMC \u0438 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043b\u043e\u0433\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e BMC-\u0441\u0442\u0435\u043a AMI, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043f\u0440\u043e\u0441\u0442\u044b\u043c, \u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-19T10:01:34.000000Z"}, {"uuid": "64f6920e-62a5-44a1-beac-90baaccd8e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/itsec_news/5534", "content": "\u200b\u26a1\ufe0f10 \u0438\u0437 10: CVE-2024-54085 \u0438\u0441\u043f\u0435\u043f\u0435\u043b\u044f\u0435\u0442 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439\n\n\ud83d\udcac \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u043c American Megatrends International (AMI), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0445 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 MegaRAC BMC \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f HPE, Asus, ASRock \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (10 \u0438\u0437 10) \u0438 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2024-54085 , \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439. \u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Redfish, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 BMC.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c: \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0434\u0430\u0436\u0435 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u044b (BMC, BIOS/UEFI) \u0438\u043b\u0438 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 AMI \u0434\u043b\u044f CVE-2023-34329 , \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2014 HPE Cray XD670, Asus RS720A-E11-RS24U \u0438 ASRockRack, \u043d\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Shodan, \u0431\u043e\u043b\u0435\u0435 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c. \u041f\u0440\u0438\u0447\u0451\u043c CVE-2024-54085 \u2014 \u043d\u0435 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 MegaRAC BMC. \u0421 2022 \u0433\u043e\u0434\u0430 Eclypsium \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 CVE-2022-40259 , CVE-2022-40242 , CVE-2022-2827 , CVE-2022-26872 \u0438 CVE-2022-40258 . \u042d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 BMC, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-34330 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Redfish. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, CVE-2022-40258 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u0445\u0435\u0448\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 BMC \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439.\n\n\u0425\u043e\u0442\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-54085 , \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0441\u043e\u0431\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 11 \u043c\u0430\u0440\u0442\u0430 AMI, Lenovo \u0438 HPE, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0434\u043e\u0441\u0442\u0443\u043f \u043a MegaRAC BMC \u0438 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043b\u043e\u0433\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e BMC-\u0441\u0442\u0435\u043a AMI, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043f\u0440\u043e\u0441\u0442\u044b\u043c, \u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-19T10:01:34.000000Z"}, {"uuid": "90c3effc-ec65-404d-b24c-13de58ca4ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40224", "type": "seen", "source": "https://t.me/ics_cert/703", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0633\u0631\u0648\u0631 \u0648\u0628 \u0633\u0641\u062a \u0627\u0641\u0632\u0627\u0631 \u0633\u0648\u0626\u06cc\u0686 \u0627\u062a\u0631\u0646\u062a Moxa SDS-3008 \n\n\u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u0633\u0631\u0648\u06cc\u0633 \u0631\u0627 \u0631\u062f \u06a9\u0646\u062f.\n\n BDU:2023-00550\n CVE-2022-40224\n\n \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627 \u0631\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645 \u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647\u060c \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc\u061b\n - \u062a\u0642\u0633\u06cc\u0645 \u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0632\u06cc\u0631\u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628.\n\n \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\n https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2023-02-11T16:54:48.000000Z"}, {"uuid": "4265031e-4aa1-49af-a772-c2ee935e7d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40258", "type": "seen", "source": "https://t.me/itsec_news/5534", "content": "\u200b\u26a1\ufe0f10 \u0438\u0437 10: CVE-2024-54085 \u0438\u0441\u043f\u0435\u043f\u0435\u043b\u044f\u0435\u0442 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439\n\n\ud83d\udcac \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u043c American Megatrends International (AMI), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0445 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 MegaRAC BMC \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f HPE, Asus, ASRock \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (10 \u0438\u0437 10) \u0438 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2024-54085 , \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439. \u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Redfish, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 BMC.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c: \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0434\u0430\u0436\u0435 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u044b (BMC, BIOS/UEFI) \u0438\u043b\u0438 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 AMI \u0434\u043b\u044f CVE-2023-34329 , \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2014 HPE Cray XD670, Asus RS720A-E11-RS24U \u0438 ASRockRack, \u043d\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Shodan, \u0431\u043e\u043b\u0435\u0435 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c. \u041f\u0440\u0438\u0447\u0451\u043c CVE-2024-54085 \u2014 \u043d\u0435 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 MegaRAC BMC. \u0421 2022 \u0433\u043e\u0434\u0430 Eclypsium \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 CVE-2022-40259 , CVE-2022-40242 , CVE-2022-2827 , CVE-2022-26872 \u0438 CVE-2022-40258 . \u042d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 BMC, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-34330 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Redfish. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, CVE-2022-40258 , \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u0445\u0435\u0448\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 BMC \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439.\n\n\u0425\u043e\u0442\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-54085 , \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0441\u043e\u0431\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 11 \u043c\u0430\u0440\u0442\u0430 AMI, Lenovo \u0438 HPE, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0434\u043e\u0441\u0442\u0443\u043f \u043a MegaRAC BMC \u0438 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043b\u043e\u0433\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Eclypsium, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e BMC-\u0441\u0442\u0435\u043a AMI, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043f\u0440\u043e\u0441\u0442\u044b\u043c, \u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-19T10:01:34.000000Z"}, {"uuid": "23a9f6f8-ba21-4518-bddb-b4991f17a7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40732", "type": "seen", "source": "https://t.me/cvedetector/13276", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-40732 - Windows Win32kbase.sys DirectComposition Access Violation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-40732 \nPublished : Dec. 18, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T01:25:03.000000Z"}, {"uuid": "d80cc527-7ff9-44c4-9924-e28f0f290795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40733", "type": "seen", "source": "https://t.me/cvedetector/13277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-40733 - Windows Win32kbase.sys DirectComposition Access Violation Denial Of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2022-40733 \nPublished : Dec. 18, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T01:25:07.000000Z"}, {"uuid": "c5224afd-966e-4188-afc4-8af626b27d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4060", "type": "published-proof-of-concept", "source": "Telegram/L0OHMinpfsBq5D28j79O71SwWui-pIwDdJhh8Em30YtM", "content": "", "creation_timestamp": "2023-10-22T18:26:56.000000Z"}, {"uuid": "47959cdc-1d6c-44b6-9106-303d393e7676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/ctinow/68399", "content": "Auth bypass bug in FortiOS, FortiProxy is exploited in the wild (CVE-2022-40684)\n\nhttps://ift.tt/K2jB5SP", "creation_timestamp": "2022-10-11T15:22:18.000000Z"}, {"uuid": "7f5ae327-b6df-40e7-a311-c7390aa7d4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/ctinow/68268", "content": "CVE-2022-40684 flaw in Fortinet products is being exploited in the wild\n\nhttps://ift.tt/YLFzNX9", "creation_timestamp": "2022-10-10T22:51:14.000000Z"}, {"uuid": "e4acc017-a683-4ef4-a703-d3ddb6da13ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/85158", "content": "Internet Bug Bounty: CVE-2022-40127: RCE in Apache Airflow <2.4.0 bash example\n\nhttps://ift.tt/K1mhCXI", "creation_timestamp": "2023-01-05T19:31:50.000000Z"}, {"uuid": "2a6aa230-32de-4f67-8944-69f224580b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/ctinow/69808", "content": "Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684 - Security Affairs\n\nhttps://ift.tt/bPnyu0I", "creation_timestamp": "2022-10-18T22:02:59.000000Z"}, {"uuid": "72136896-f92b-4687-a35b-718e4efab127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/ctinow/69704", "content": "Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684\n\nhttps://ift.tt/bPnyu0I", "creation_timestamp": "2022-10-18T10:11:37.000000Z"}, {"uuid": "366b6561-a3fa-4ff2-8801-ba7be3a9ea3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/69146", "content": "Experts released PoC exploit code for critical bug CVE-2022-40684 in Fortinet products\n\nhttps://ift.tt/wZx1fdL", "creation_timestamp": "2022-10-14T11:46:06.000000Z"}, {"uuid": "67fde105-9f20-4fd3-9637-d915211ed0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/ctinow/70451", "content": "Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684 - Security Affairs\n\nhttps://ift.tt/UKba5qT", "creation_timestamp": "2022-10-21T11:46:55.000000Z"}, {"uuid": "2ccd524e-e28a-4b47-a15a-5a7784222a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/17088", "content": "\ud83d\udea8CVE-2022-40684: Proof of Concept of how an attacker can exploit a Fortinet device with public HTTPS management. PoC released by Horizon3AI.\n\nVideo Credit: youtube.com/@novacybersec", "creation_timestamp": "2025-05-09T18:34:09.000000Z"}, {"uuid": "0ff23fd2-1ce2-4ebc-a91d-d49a9249f5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "Telegram/eXJ6uhsB4kT2KyMwIIgJLCK6BJUbaFQ2cqtfVl9phdXYTZg", "content": "", "creation_timestamp": "2023-03-06T19:04:24.000000Z"}, {"uuid": "0911ee6e-0168-4a2e-b366-96b8359fab30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4001", "type": "seen", "source": "https://t.me/cvedetector/2184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-4001 - Apache API Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-4001 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : An authentication bypass vulnerability could allow an attacker to access API functions without authentication. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:22:07.000000Z"}, {"uuid": "b8b5004a-d81d-4380-b7a3-95a9478a1cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4003", "type": "seen", "source": "https://t.me/cvedetector/2182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-4003 - Apache Commons Denial of Service Vulneability\", \n  \"Content\": \"CVE ID : CVE-2022-4003 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:22:06.000000Z"}, {"uuid": "6fcc2e7d-9a21-4e22-9d2a-a7083e5e108c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4002", "type": "seen", "source": "https://t.me/cvedetector/2183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-4002 - Apache Web Server Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-4002 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:22:06.000000Z"}, {"uuid": "b0ada3b7-d18d-47ac-b056-18309464ed99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40534", "type": "seen", "source": "https://t.me/cibsecurity/69846", "content": "\u203c CVE-2022-40534 \u203c\n\nMemory corruption due to improper validation of array index in Audio.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T12:22:57.000000Z"}, {"uuid": "609a6510-5b7f-489c-a4cb-ea26a4766bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/ViralCyber/10369", "content": "\ud83d\udd34 \u06cc\u06a9 \u0628\u0627\u0632\u06cc\u06af\u0631 \u062a\u0647\u062f\u06cc\u062f \u0627\u062f\u0639\u0627 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2022-40684 \u062a\u0648\u0646\u0633\u062a\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a 15000 \u0627\u06a9\u0627\u0646\u062a FortiGate VPN \u0631\u0648 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u06a9\u0646\u0647. \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0635\u0648\u0631\u062a \u0631\u0627\u06cc\u06af\u0627\u0646 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0646.\n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2022-40684 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0633\u0627\u0644 2022 \u062f\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc FortiGate \u0648 \u067e\u0631\u0627\u06a9\u0633\u06cc\u200c\u0647\u0627\u06cc \u0648\u0628 FortiProxy \u0634\u0631\u06a9\u062a \u0641\u0648\u0631\u062a\u06cc\u200c \u0646\u062a \u06a9\u0634\u0641 \u0634\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0648\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u062f\u0627\u062f \u0628\u062f\u0648\u0646 \u062f\u0627\u0634\u062a\u0646 \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u062a\u0628\u0631\u060c \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648\u0627\u0631\u062f \u0628\u0634\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0627\u0648\u0646\u0627\u0631\u0648 \u0628\u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646.\n\n\u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0632\u06cc\u06af\u0631 \u062a\u0647\u062f\u06cc\u062f \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647\u060c \u0634\u0627\u0645\u0644 IP \u0648 \u067e\u0633\u0648\u0631\u062f \u0648 \u06a9\u0627\u0646\u0641\u06cc\u06af \u0647\u0633\u062a\u0634 \u0648 \u062d\u062c\u0645 1.55 \u06af\u06cc\u06af \u062f\u0627\u0631\u0647. (\u0641\u0634\u0631\u062f\u0647 \u0634\u062f\u0647 \u0627\u0634)\n\n\u0627\u06af\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u062f\u060c \u0627\u06cc\u0646\u062c\u0627 IP\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u060c \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.\n\n#\u0641\u0648\u0631\u062a\u06cc_\u0646\u062a\n#CVE #fortinet #FortiGate #FortiProxy\n\n\ud83c\udd94 @onhex_ir\n\u27a1\ufe0f ALL Link", "creation_timestamp": "2025-01-22T11:07:38.000000Z"}, {"uuid": "7a1267f9-a0fe-41b7-b67b-c7c251ebd210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/3041", "content": "\ud83d\udea8A Threat Actor is Allegedly Selling an Exploit for CVE-2022-40684\n\nhttps://darkwebinformer.com/a-threat-actor-is-allegedly-selling-an-exploit-for-cve-2022-40684/", "creation_timestamp": "2024-09-06T15:46:07.000000Z"}, {"uuid": "46428dbb-6d32-42f2-a570-edd0f85f87af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40482", "type": "seen", "source": "Telegram/7EjgEJFkCigu3E3qxdvX-GPZjONqLDE9BgGHEHWIxxLd6dQS", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "defb2b50-5a87-476f-8580-3ae7f3f81c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "Telegram/B_s7wUv7NqnF_QxZ0yvH_1oKFsyHKfe56lQgg2pc4E2COeUn", "content": "", "creation_timestamp": "2025-02-06T02:41:36.000000Z"}, {"uuid": "a0c1902e-c50f-4fc0-b240-226088272dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40524", "type": "seen", "source": "https://t.me/cibsecurity/69842", "content": "\u203c CVE-2022-40524 \u203c\n\nMemory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T12:22:53.000000Z"}, {"uuid": "68d78043-8c36-49ac-a38d-f80348a62908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "Telegram/Kilcqj-01hSB61ivOp72hCqX2Z4YcByxZD2e-KVOKoCfiL_p", "content": "", "creation_timestamp": "2025-02-06T02:40:48.000000Z"}, {"uuid": "1e8d7bdf-6ad2-44dd-b4f4-a54115ec5285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40208", "type": "seen", "source": "Telegram/dUBmutkXk07zInpKF4ADJdGS2NOX-zWiqNTWwCz9O4nJhx0Q", "content": "", "creation_timestamp": "2025-02-20T23:26:56.000000Z"}, {"uuid": "6db57ee7-fffc-4b15-bf23-8aede2f00178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "Telegram/YygdwYzZCHMPO245g2DdeO09KlFfA-PZPbA398KwBQfH1yjY", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "7d4bdad8-e726-4288-8c73-739e4c824e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40507", "type": "seen", "source": "https://t.me/darkcommunityofficial/156", "content": "\u041e\u0442\u043a\u043e\u043f\u0430\u0432 \u043f\u0430\u0440\u043e\u0447\u043a\u0443 0-day \u0432 Apple, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0437\u0430 Android, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 zero-click \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u0434\u0435\u043a\u0430\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 85 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445, CVE-2023-40088, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-40077, CVE-2023-40076 \u0438 CVE-2023-45866) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Android Framework \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2022-40507 - \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Qualcomm \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: 2023-12-01 \u0438 2023-12-05. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2023-12-05T12:58:09.000000Z"}, {"uuid": "45e0ad8b-bded-416f-a8e9-7ff3b8921e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/pt_soft/270", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "creation_timestamp": "2024-05-03T09:04:40.000000Z"}, {"uuid": "ed580273-c687-45a9-9a5e-51d1bb763054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/pt_soft/243", "content": "\ud83d\uddbc\ufe0f Moriarty v1.1\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "creation_timestamp": "2024-03-15T08:58:02.000000Z"}, {"uuid": "2dcf232f-04db-4557-b574-58c441d9b9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40211", "type": "seen", "source": "https://t.me/arpsyndicate/4674", "content": "#ExploitObserverAlert\n\nCVE-2022-40211\n\nDESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2022-40211. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP allows Stored XSS.This issue affects GiveWP: from n/a through 2.25.1.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.6828571", "creation_timestamp": "2024-04-14T01:28:22.000000Z"}, {"uuid": "efb0a48b-8819-40de-8b4e-c458d4bbfc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40152", "type": "seen", "source": "https://t.me/arpsyndicate/3245", "content": "#ExploitObserverAlert\n\nCVE-2022-40152\n\nDESCRIPTION: Exploit Observer has 6 entries in 5 file formats related to CVE-2022-40152. Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\nFIRST-EPSS: 0.002460000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T07:11:18.000000Z"}, {"uuid": "499b8c70-8b26-45b3-b0fc-bf303a08449f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40312", "type": "seen", "source": "https://t.me/arpsyndicate/2074", "content": "#ExploitObserverAlert\n\nCVE-2022-40312\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-40312. Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP \u2013 Donation Plugin and Fundraising Platform.This issue affects GiveWP \u2013 Donation Plugin and Fundraising Platform: from n/a through 2.25.1.\n\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-12-23T03:59:05.000000Z"}, {"uuid": "b575bfd8-3433-4452-bf48-2892065d9488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40151", "type": "seen", "source": "https://t.me/arpsyndicate/3233", "content": "#ExploitObserverAlert\n\nCVE-2022-40151\n\nDESCRIPTION: Exploit Observer has 5 entries in 5 file formats related to CVE-2022-40151. Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\nFIRST-EPSS: 0.002700000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T06:28:56.000000Z"}, {"uuid": "b1e7ac82-f7f7-4994-bb1c-f5e07af0dd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "seen", "source": "https://t.me/arpsyndicate/3230", "content": "#ExploitObserverAlert\n\nCVE-2022-40664\n\nDESCRIPTION: Exploit Observer has 9 entries in 5 file formats related to CVE-2022-40664. Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.\n\nFIRST-EPSS: 0.013150000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T06:18:40.000000Z"}, {"uuid": "2f5ff5f5-4d60-4796-b6f1-6d42d12fca56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/arpsyndicate/2019", "content": "#ExploitObserverAlert\n\nCVE-2022-40982\n\nDESCRIPTION: Exploit Observer has 25 entries related to CVE-2022-40982. Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\n\nFIRST-EPSS: 0.001050000\nNVD-IS: 4.0\nNVD-ES: 2.0", "creation_timestamp": "2023-12-18T16:07:16.000000Z"}, {"uuid": "54cdbff4-2457-4dc9-ac5e-592aeefb1308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://t.me/arpsyndicate/1885", "content": "#ExploitObserverAlert\n\nCVE-2022-40674\n\nDESCRIPTION: Exploit Observer has 28 entries related to CVE-2022-40674. libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.\n\nFIRST-EPSS: 0.004320000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-18T01:52:41.000000Z"}, {"uuid": "cc317486-cec5-465f-b228-5916dd45202c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/arpsyndicate/1355", "content": "#ExploitObserverAlert\n\nCVE-2022-40765\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-40765. A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.\n\nFIRST-EPSS: 0.002010000\nNVD-IS: 5.9\nNVD-ES: 0.9", "creation_timestamp": "2023-12-05T01:25:42.000000Z"}, {"uuid": "546d066a-4bf1-49b0-9243-76d91e50fe54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40635", "type": "seen", "source": "https://t.me/arpsyndicate/878", "content": "#ExploitObserverAlert\n\nCVE-2022-40635\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-40635. Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.\n\nFIRST-EPSS: 0.000890000\nNVD-IS: 5.9\nNVD-ES: 1.2", "creation_timestamp": "2023-12-02T02:08:10.000000Z"}, {"uuid": "aa762dd7-da53-4c3d-ba76-a32db68c93f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40634", "type": "seen", "source": "https://t.me/arpsyndicate/883", "content": "#ExploitObserverAlert\n\nCVE-2022-40634\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-40634. Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.\n\nFIRST-EPSS: 0.000890000\nNVD-IS: 5.9\nNVD-ES: 1.2", "creation_timestamp": "2023-12-02T02:48:28.000000Z"}, {"uuid": "f66ecce7-19f3-46a8-bee4-b88881f9faae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40898", "type": "seen", "source": "https://t.me/arpsyndicate/2734", "content": "#ExploitObserverAlert\n\nCVE-2022-40898\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2022-40898. An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.\n\nFIRST-EPSS: 0.002590000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-09T08:40:57.000000Z"}, {"uuid": "3a736258-c261-4afd-8cae-ddd90f187cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/arpsyndicate/2688", "content": "#ExploitObserverAlert\n\nCVE-2022-40648\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-40648. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-08T22:23:11.000000Z"}, {"uuid": "bf24b689-9427-41a9-8580-ed60c7791091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://t.me/arpsyndicate/1715", "content": "#ExploitObserverAlert\n\nCVE-2022-40674\n\nDESCRIPTION: Exploit Observer has 28 entries related to CVE-2022-40674. libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.\n\nFIRST-EPSS: 0.004320000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-11T07:37:19.000000Z"}, {"uuid": "8ec98043-edec-44ef-a461-5abbdb02ffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "https://t.me/arpsyndicate/1709", "content": "#ExploitObserverAlert\n\nCVE-2022-4059\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-4059. The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.\n\nFIRST-EPSS: 0.013640000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T06:25:45.000000Z"}, {"uuid": "f8938233-b4fc-4e49-9a65-84e9ac7f2277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "Telegram/Z-TCSZwyPrx2SRzSQYAF7fm2y9wwmz9UezFFDtTwe8sYNg", "content": "", "creation_timestamp": "2023-08-09T20:04:12.000000Z"}, {"uuid": "c992f134-2107-4772-8af9-dd61447f926d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/legendscrewch/2494", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T18:17:33.000000Z"}, {"uuid": "fe0bd403-ae1e-47c9-bb25-ea6512f485d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/legendscrewch/2493", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T18:17:33.000000Z"}, {"uuid": "ee7642f0-e4c7-4f30-aedc-1b54435c246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/3RIRgHPw6J4xgfvfrZclYkftkGA3hESPujhagMjsucbROF0", "content": "", "creation_timestamp": "2023-01-10T10:47:57.000000Z"}, {"uuid": "e28eec4c-453e-47db-88cc-5ed4928bf50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/netrunnerz/309", "content": "#cve\n\nCVE-2022-40684\n\n\u0412 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet (FortiOS, FortiProxy \u0438 FortiSwitchManager) \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e LDAP, \u043f\u0443\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\n\n\u0412\u0441\u0435 \u043d\u0443\u0436\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b:\n\ud83d\udd38https://github.com/carlosevieira/CVE-2022-40684\n\ud83d\udd38https://www.usergate.com/ru/security-reports/CVE-2022-40684", "creation_timestamp": "2022-10-15T11:17:09.000000Z"}, {"uuid": "2ae7684e-935d-4863-802d-1cf4c7412144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/WihYjZpKNIYylc-ChTuYB_T11QPQd1rZGQXBp3o0NaE4LfU", "content": "", "creation_timestamp": "2025-01-24T22:00:05.000000Z"}, {"uuid": "27c0122f-1d4e-4e09-8dd6-2244f18d4a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/KomunitiSiber/626", "content": "Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs\nhttps://thehackernews.com/2023/08/collidepower-downfall-and-inception-new.html\n\nCybersecurity researchers have disclosed details of a trio of side-channel attacks that could be exploited to leak sensitive data from modern CPUs.\nCalled\u00a0Collide+Power\u00a0(CVE-2023-20583),\u00a0Downfall\u00a0(CVE-2022-40982), and\u00a0Inception\u00a0(CVE-2023-20569), the novel methods follow the disclosure of another newly discovered security vulnerability affecting AMD's Zen 2 architecture-based processors known as\u00a0", "creation_timestamp": "2023-08-09T20:11:13.000000Z"}, {"uuid": "62fd2ca7-75a8-49a6-8260-0dd48ee2a5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/UUBb8Gf4y_E2nIBpq5C_QjPYTDQWWE0SAsheqeKLKMFaxYI", "content": "", "creation_timestamp": "2025-01-16T16:00:10.000000Z"}, {"uuid": "e63cd4d9-4196-4c89-9415-52943c1efa2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/x09wf5BV-L38GDGdLKlPP_ES7jGx8v3mUPVSlknfUHbTZ6U", "content": "", "creation_timestamp": "2025-01-18T22:00:06.000000Z"}, {"uuid": "3dc305ec-05f7-4a6c-ba26-8c539dd0d767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40297", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2752", "content": "#Tools -\u00a0 \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\nMicrowaveo\n\nConvert dll exe, etc. to an encrypted shellcode.\n\nhttps://github.com/Ciyfly/microwaveo\n\nCVE-2022-40297\n\nPrivilage escalation in Ubuntu Touch 16.04 - by PIN Bruteforce.\n\nhttps://github.com/filipkarc/PoC-ubuntutouch-pin-privesc\n\n#cve\n\nexploits-predict\n\nPredicting the probability of an exploit being released after a CVE is published (by Machine learning algorithm)\n\nhttps://github.com/wisoffe/exploits-predict\n\n#cve #exploit\n\nvMass Bot\n\nvMass Bot automates the exploitation of remote hosts by trying to find environment files (.env) in target hosts and extract tools and info insde, then the bot detects the target host CMS and tries to auto exploit and upload shell payload using the vMass vulnerability set ( 108 exploits in the current version 1.2).\n\nNo target list ? No worries, vMass Bot can generate hosts lists from IP ranges, URL list, dotenv low profile dorks and scrapes from (bing, duckduckgo, ..) or you can use IP ranges from various hosting providers for best hit rate while scanning, then generated lists can be checked using the bot to eleminate dead hosts.\n\nhttps://github.com/c99tn/vMass\n\nCVE-2022-36804-RCE\n\nZimbra Unauthenticated Remote Code Execution Exploit.\n\nhttps://github.com/mohamedbenchikh/CVE-2022-27925\n\n#cve #exploit\n\nEfiCMake\n\nCMake template for a basic EFI application/bootkit.\n\nhttps://github.com/mrexodia/EfiCMake\n\nDuckySploit\n\nV3 Roblox Level 7 Executor Free.\n\nFeatures:\n\u25ab\ufe0f Dark Hub\n\u25ab\ufe0f Dex Explorer\n\u25ab\ufe0f Fusionic Hub\n\u25ab\ufe0f Kraken Hub\n\u25ab\ufe0f Ori Hub\n\u25ab\ufe0f Owl Hub\n\u25ab\ufe0f Solaris\n\u25ab\ufe0f Zyrex Hub\n\nhttps://github.com/Omnis9/DuckySploit-V3\n\nChameleon\n\nChameleon provides better content discovery by using wappalyzer's set of technology fingerprints alongside custom wordlists tailored to each detected technologies.\n\nThe tool is highly customizable and allows users to add in their own custom wordlits, extensions or fingerprints.\n\nhttps://github.com/iustin24/chameleon\n\nThe full documentation is available on: \nhttps://youst.in/posts/context-aware-conent-discovery-with-chameleon/\n\nLIKE-DBG\n\nFully dockerized Linux kernel debugging environment.\n\n(LInux-KErnel-DeBuGger) aims at automating the boring steps when trying to set up a Linux kernel debugging environment.\n\nhttps://github.com/0xricksanchez/like-dbg\n\npypykatz\n\nMimikatz implementation in pure Python. \n\nhttps://github.com/skelsec/pypykatz\n\nAndroid RAT\n\n#RAT built in Android APP for Android User\n\nhttps://github.com/Th30neAnd0nly/Ohm\n\nSudo-Stealer\n\nSudo-Stealer is an *nix program for stealing sudo passwords by disguising as the original sudo software. Its capabilities are almost similar to that of the original sudo program as such as displaying the same input messages, error messages like incorrect attempts and also handling of some system signals such as SIGQUIT, SIGINT & SIGTSTP. It verify the password, stores it in json support as well as username, the command that was executed and the execution time in a file for later usage.\n\nFeatures:\n\u25ab\ufe0f Maximum of 3 wrong password attempts\n\u25ab\ufe0f Timeouts the superuser session's after 15 minutes\n\u25ab\ufe0f Stores correct passwords with their respective commands and the time it was executed\n\nhttps://github.com/Genaro-Chris/Sudo-Stealer\n\nEvil-Storm\n\nThis tool can create a Fake Access point.\n\nFeatures:\n\u25ab\ufe0f Create a Fake AP with a specific name and password\n\u25ab\ufe0f DNS spoofing (not completed)\n\u25ab\ufe0f ARP spoofing\n\u25ab\ufe0f Reverse shell\n\u25ab\ufe0f give the Victim Access to the Internet after connecting to your Fake AP\n\u25ab\ufe0f see all websites victim open it you are the Router\n\nhttps://github.com/Root3inspector/Evil-Storm\n\nLimeLighter\n\nA tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock scruitney. LimeLighter can also use valid code signing certificates to sign files. Limelighter can use a fully qualified domain name such as acme.com.\n\nhttps://github.com/Tylous/Limelighter\n\nJoin:\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory\n\nWebsite:\nwww.ghostclan.org\n\n#InsoSec #cybersec \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06", "creation_timestamp": "2023-03-29T02:59:56.000000Z"}, {"uuid": "5e3f0ee6-4a44-4ac2-a2d6-844c8ed1492c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/AnonCyberWarrior/344", "content": "We have successfully managed to replicate and confirm the public PoC for CVE-2022-40684. which grants SSH access without any interaction to vulnerable FortiOS instances, with CVSS score of 9.6.\n\nNuclei template for scanning can be found here:\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#BugBounty \n#ZeemiBhai", "creation_timestamp": "2022-10-20T14:28:44.000000Z"}, {"uuid": "da0ee04e-8e0a-4664-8b35-3bfe0a2d8563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/554", "content": "\u200b\u200bCVE-2022-40684 Metasploit Scanner\n\nAn authentication bypass using an alternate path or channel in Fortinet product\n\nhttps://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner\n\n#cve", "creation_timestamp": "2022-11-01T23:28:55.000000Z"}, {"uuid": "6f02bf06-cf18-4152-8a00-f00a51b3131f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/dilagrafie/2561", "content": "#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\nZoneAlarmEoP\n\nExploit for Arbitrary File Move vulnerability in ZoneAlarm AV\n\nhttps://github.com/Wh04m1001/ZoneAlarmEoP\n\n\u200b\u200bAWSGoat\n\nA Damn Vulnerable AWS Infrastructure\n\nAWSGoat is a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach.\n\nThe project will be divided into modules and each module will be a separate web application, powered by varied tech stacks and development practices. It will leverage IaC through terraform and GitHub actions to ease the deployment process.\n\nhttps://github.com/ine-labs/AWSGoat\n\n\u200b\u200bPowerHub\n\nPowerHub is a convenient post exploitation tool for PowerShell which aids a pentester in transferring data, in particular code which may get flagged by endpoint protection. Check out the Wiki! \n\nFeatures:\n\u25ab\ufe0f Fileless\n\u25ab\ufe0f Stateless\n\u25ab\ufe0f Cert pinning\n\u25ab\ufe0f String \"obfuscation\" by RC4 encryption\n\u25ab\ufe0f Choose your AMSI Bypass\n\u25ab\ufe0f Transparent aliases for in-memory execution of C# programs\n\nhttps://github.com/AdrianVollmer/PowerHub\n\n\u200b\u200bHome-Grown-Red-Team\n\nThis repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.\n\nAll of the tools and tradecraft on this repo will be geared toward using Raspberry Pis and Raspberry Pi Zero Ws instead of commerical implants like the Rubbery Ducky, BashBunny or Wifi Pineapple.\n\nhttps://github.com/assume-breach/Home-Grown-Red-Team\n\n\u200b\u200bGhostPack-Compiled Binaries\n\nhttps://github.com/r3motecontrol/Ghostpack-CompiledBinaries\n\n\u200b\u200bCVE-2022-40684 Metasploit Scanner\n\nAn authentication bypass using an alternate path or channel in Fortinet product\n\nhttps://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner\n\n\u200b\u200bRollter\n\nIPsec VPN server with i2p onion and yggdrasil routing\n\nWEB serfing with no limits. Open any sites: onion, i2p and yggdrasil too!\n\nhttps://github.com/thedmdim/rollter\n\n\u200b\u200bSpartacus DLL Hijacking\n\nDid you really make yet another DLL Hijacking discovery tool?\n\n...but with a twist as Spartacus is utilising the SysInternals Process Monitor and is parsing raw PML log files. You can leave ProcMon running for hours and discover 2nd and 3rd level (ie an app that loads another DLL that loads yet another DLL when you use a specific feature of the parent app) DLL Hijacking vulnerabilities. It will also automatically generate proxy DLLs with all relevant exports for vulnerable DLLs.\n\nParsing ProcMon PML files natively. The config (PMC) and log (PML) parsers have been implemented by porting partial functionality to C# from https://github.com/eronnen/procmon-parser/. You can find the format specification here.\n\nSpartacus will create proxy DLLs for all missing DLLs that were identified. For instance, if an application is vulnerable to DLL Hijacking via version.dll, Spartacus will create a version.dll.cpp file for you with all the exports included in it. Then you can insert your payload/execution technique and compile.\n\nAble to process large PML files and store all DLLs of interest in an output CSV file. Local benchmark processed a 3GB file with 8 million events in 45 seconds.\n\n[Defence] Monitoring mode trying to identify running applications proxying calls, as in \"DLL Hijacking in progress\". This is just to get any low hanging fruit and should not be relied upon.\n\nhttps://github.com/Accenture/Spartacus\n\n\u200b\u200bBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nwww.ghostclan.org\n\u200b", "creation_timestamp": "2023-03-17T07:32:38.000000Z"}, {"uuid": "b2088ec8-1d87-4cfc-b779-6d0e4da76dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/118", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T13:30:21.000000Z"}, {"uuid": "88d15160-5ceb-43f5-86cc-f03b5e50125e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/117", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T07:10:23.000000Z"}, {"uuid": "a8d2a51a-20a6-4a26-81f8-e23f0a15f960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/anonhamz/2451", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T18:17:34.000000Z"}, {"uuid": "be6e14ea-4e09-44f2-97ca-bfc30744ae0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/anonhamz/2450", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T18:17:34.000000Z"}, {"uuid": "1b84b3d3-934b-4e13-b50c-8a625477d1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/dxe_0x0/171", "content": "Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0441 \u0447\u0438\u043f\u043e\u043c Trusted Platform Module (TPM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c Secure Boot \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c ESET\u00a0\u041c\u0430\u0440\u0442\u0438\u043d \u0421\u043c\u043e\u043b\u0430\u0440 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020\u00a0\u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 UEFI.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438).\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u041e\u0421 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 Acer Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G.\n\nAcer \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c BIOS \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\nLenovo, \u043a \u0441\u043b\u043e\u0432\u0443,\u00a0\u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 UEFI Secure Boot, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 ESET \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 ThinkBook, IdeaPad \u0438 Yoga, \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 Lenovo \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0440\u0430\u043d\u043d\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438\u0437 \u041e\u0421.", "creation_timestamp": "2022-11-29T11:13:31.000000Z"}, {"uuid": "e8f0c83d-bbfb-4fea-8be9-659587db89f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2115", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T13:30:21.000000Z"}, {"uuid": "d62a0f51-c5f6-48c8-9717-d87e9905fd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2114", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T07:10:23.000000Z"}, {"uuid": "c8046871-2986-4b2d-9f7a-eeeebca980e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4047", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/283", "content": "WordPress mass Arbitrary File Upload .\n\nWooRefer: Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4047 - Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload (Mass PHP File Upload)\n\nLink repo: https://github.com/im-hanzou/WooRefer\nImportant please read!: https://github.com/im-hanzou/WooRefer#readme\n\nReference: https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94", "creation_timestamp": "2023-09-26T10:44:16.000000Z"}, {"uuid": "b21b80fe-d25e-4c89-9fc5-6b08b575571b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4061", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/281", "content": "Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4061 - JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload\n\nhttps://github.com/im-hanzou/JBWPer", "creation_timestamp": "2023-09-17T19:01:38.000000Z"}, {"uuid": "f5f2ed6b-fa02-4310-b269-68ede3e62de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4060", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/280", "content": "WordPress RCE \n\nAutomatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery <= 2.19 - Unauthenticated RCE\n\nLink: https://github.com/im-hanzou/UPGer\n\n\u2764\ufe0f", "creation_timestamp": "2023-09-16T11:53:50.000000Z"}, {"uuid": "1d3ed75b-6503-4116-9a9e-88d04e85e775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/278", "content": "LFI WordPress lagi bang.\nAutomatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE\nLink: https://github.com/im-hanzou/INPGer\nSingle Exploiter (beta): https://github.com/.../blob/main/single-exploiter-beta.py", "creation_timestamp": "2023-09-12T03:15:02.000000Z"}, {"uuid": "22deb618-d6e7-4da5-b157-19a53c621548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/proxy_bar/1050", "content": "\u0422\u0430\u043a,  RCE (CVE-2022-40684 ) \u0432\u043e\u043d \u0432\u044b\u0448\u0435 \u0434\u0430\u043b\u0438, \u0430 \u0432\u044b \u0441\u0438\u0434\u0438\u0442\u0435 \u0431\u0435\u0437 \u0434\u0435\u043b\u0430, \u043f\u044f\u0442\u043d\u0438\u0446\u0430 ? ))))\n*\nDork: http://tag.name:(fortinet \u0418\u041b\u0418 fortigate_vpn)\nLink to search: app.netlas\n\n#fortinet", "creation_timestamp": "2022-10-14T14:12:15.000000Z"}, {"uuid": "fbd18a51-2ea5-4038-b957-3f590c32d903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1049", "content": "CVE-2022-40684\nFortiOS Authentication Bypass\n\nPOC \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 FortiOS", "creation_timestamp": "2022-10-13T21:48:59.000000Z"}, {"uuid": "acab0d6b-1304-4194-ba2d-dec1dbf15699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1130", "content": "CVE-2022-40146 exploit\n\u0414\u044b\u0440\u044b  \u0432 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e Apache Batik \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u2014 SSRF \u0438 RCE \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u043e\u0432\nWhat da fuck is this ?  Read \n\n#apache #rce #java", "creation_timestamp": "2022-11-01T10:22:32.000000Z"}, {"uuid": "6826b2ab-480d-45e8-a6e9-3c1533e59b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1063", "content": "\u041e\u0431\u043d\u043e\u0432\u0438  \u0441\u0432\u043e\u0439 MetaSploit\nAdded module for CVE-2022-40684 (FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass)\npull", "creation_timestamp": "2022-10-16T15:39:29.000000Z"}, {"uuid": "f3cc66c2-0d46-410e-93ea-a887495d1cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/4135", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T18:17:34.000000Z"}, {"uuid": "492691ff-5d4a-49c3-8de8-8438c69f8321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/4134", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T18:17:34.000000Z"}, {"uuid": "a7ec4b09-e4aa-4657-8fb6-2aea7aa64cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/lcmysecteamch/4626", "content": "#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\nZoneAlarmEoP\n\nExploit for Arbitrary File Move vulnerability in ZoneAlarm AV\n\nhttps://github.com/Wh04m1001/ZoneAlarmEoP\n\n\u200b\u200bAWSGoat\n\nA Damn Vulnerable AWS Infrastructure\n\nAWSGoat is a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach.\n\nThe project will be divided into modules and each module will be a separate web application, powered by varied tech stacks and development practices. It will leverage IaC through terraform and GitHub actions to ease the deployment process.\n\nhttps://github.com/ine-labs/AWSGoat\n\n\u200b\u200bPowerHub\n\nPowerHub is a convenient post exploitation tool for PowerShell which aids a pentester in transferring data, in particular code which may get flagged by endpoint protection. Check out the Wiki! \n\nFeatures:\n\u25ab\ufe0f Fileless\n\u25ab\ufe0f Stateless\n\u25ab\ufe0f Cert pinning\n\u25ab\ufe0f String \"obfuscation\" by RC4 encryption\n\u25ab\ufe0f Choose your AMSI Bypass\n\u25ab\ufe0f Transparent aliases for in-memory execution of C# programs\n\nhttps://github.com/AdrianVollmer/PowerHub\n\n\u200b\u200bHome-Grown-Red-Team\n\nThis repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.\n\nAll of the tools and tradecraft on this repo will be geared toward using Raspberry Pis and Raspberry Pi Zero Ws instead of commerical implants like the Rubbery Ducky, BashBunny or Wifi Pineapple.\n\nhttps://github.com/assume-breach/Home-Grown-Red-Team\n\n\u200b\u200bGhostPack-Compiled Binaries\n\nhttps://github.com/r3motecontrol/Ghostpack-CompiledBinaries\n\n\u200b\u200bCVE-2022-40684 Metasploit Scanner\n\nAn authentication bypass using an alternate path or channel in Fortinet product\n\nhttps://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner\n\n\u200b\u200bRollter\n\nIPsec VPN server with i2p onion and yggdrasil routing\n\nWEB serfing with no limits. Open any sites: onion, i2p and yggdrasil too!\n\nhttps://github.com/thedmdim/rollter\n\n\u200b\u200bSpartacus DLL Hijacking\n\nDid you really make yet another DLL Hijacking discovery tool?\n\n...but with a twist as Spartacus is utilising the SysInternals Process Monitor and is parsing raw PML log files. You can leave ProcMon running for hours and discover 2nd and 3rd level (ie an app that loads another DLL that loads yet another DLL when you use a specific feature of the parent app) DLL Hijacking vulnerabilities. It will also automatically generate proxy DLLs with all relevant exports for vulnerable DLLs.\n\nParsing ProcMon PML files natively. The config (PMC) and log (PML) parsers have been implemented by porting partial functionality to C# from https://github.com/eronnen/procmon-parser/. You can find the format specification here.\n\nSpartacus will create proxy DLLs for all missing DLLs that were identified. For instance, if an application is vulnerable to DLL Hijacking via version.dll, Spartacus will create a version.dll.cpp file for you with all the exports included in it. Then you can insert your payload/execution technique and compile.\n\nAble to process large PML files and store all DLLs of interest in an output CSV file. Local benchmark processed a 3GB file with 8 million events in 45 seconds.\n\n[Defence] Monitoring mode trying to identify running applications proxying calls, as in \"DLL Hijacking in progress\". This is just to get any low hanging fruit and should not be relied upon.\n\nhttps://github.com/Accenture/Spartacus\n\n\u200b\u200bBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nwww.ghostclan.org\n\u200b", "creation_timestamp": "2023-03-17T08:39:13.000000Z"}, {"uuid": "0c7d9974-80d4-420b-8c33-f0e42083bd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/breachdetector/133711", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"Demon Forums\",\n  \"Threat Actor\": \"zwriner\",\n  \"Content\": \"CVE-2022-40684\u201d,\n  \"Detection Date\": \"27 Oct 2022 03:26\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2022-10-27T03:40:11.000000Z"}, {"uuid": "fe2d8bd2-42e5-41e9-8b40-be4c3f57f507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/breachdetector/360272", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"What is SSRF (CVE-2022-4096) DNS Connection ?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"16 Oct 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-10-16T15:54:09.000000Z"}, {"uuid": "44c29a13-483e-4f19-9c13-ef3f02a51578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/breachdetector/133611", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"Sinister.ly\",\n  \"Threat Actor\": \"zwriner\",\n  \"Content\": \"CVE-2022-40684\",\n  \"Detection Date\": \"26 Oct 2022 08:17\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2022-10-26T08:35:52.000000Z"}, {"uuid": "ddf4d512-8d91-4ce6-85f3-ddb06c5437ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/Y8mz05uOIf8YtnySPaDRZUtACp4WSExl4gBbVXbK3Qdkoy8", "content": "", "creation_timestamp": "2022-10-24T12:04:05.000000Z"}, {"uuid": "56ae54a4-3969-47d4-a8e2-cdfa66c62bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/breachdetector/404859", "content": "{\n  \"Source\": \"https://crackingx.com/\",\n  \"Content\": \"CVE-2022-40684\", \n  \"author\": \" (zwriner)\",\n  \"Detection Date\": \"22 Dec 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-12-22T15:02:54.000000Z"}, {"uuid": "b99ea311-fb68-4b7a-bfde-2f95950e1f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/13128", "content": "#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\nZoneAlarmEoP\n\nExploit for Arbitrary File Move vulnerability in ZoneAlarm AV\n\nhttps://github.com/Wh04m1001/ZoneAlarmEoP\n\n\u200b\u200bAWSGoat\n\nA Damn Vulnerable AWS Infrastructure\n\nAWSGoat is a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach.\n\nThe project will be divided into modules and each module will be a separate web application, powered by varied tech stacks and development practices. It will leverage IaC through terraform and GitHub actions to ease the deployment process.\n\nhttps://github.com/ine-labs/AWSGoat\n\n\u200b\u200bPowerHub\n\nPowerHub is a convenient post exploitation tool for PowerShell which aids a pentester in transferring data, in particular code which may get flagged by endpoint protection. Check out the Wiki! \n\nFeatures:\n\u25ab\ufe0f Fileless\n\u25ab\ufe0f Stateless\n\u25ab\ufe0f Cert pinning\n\u25ab\ufe0f String \"obfuscation\" by RC4 encryption\n\u25ab\ufe0f Choose your AMSI Bypass\n\u25ab\ufe0f Transparent aliases for in-memory execution of C# programs\n\nhttps://github.com/AdrianVollmer/PowerHub\n\n\u200b\u200bHome-Grown-Red-Team\n\nThis repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.\n\nAll of the tools and tradecraft on this repo will be geared toward using Raspberry Pis and Raspberry Pi Zero Ws instead of commerical implants like the Rubbery Ducky, BashBunny or Wifi Pineapple.\n\nhttps://github.com/assume-breach/Home-Grown-Red-Team\n\n\u200b\u200bGhostPack-Compiled Binaries\n\nhttps://github.com/r3motecontrol/Ghostpack-CompiledBinaries\n\n\u200b\u200bCVE-2022-40684 Metasploit Scanner\n\nAn authentication bypass using an alternate path or channel in Fortinet product\n\nhttps://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner\n\n\u200b\u200bRollter\n\nIPsec VPN server with i2p onion and yggdrasil routing\n\nWEB serfing with no limits. Open any sites: onion, i2p and yggdrasil too!\n\nhttps://github.com/thedmdim/rollter\n\n\u200b\u200bSpartacus DLL Hijacking\n\nDid you really make yet another DLL Hijacking discovery tool?\n\n...but with a twist as Spartacus is utilising the SysInternals Process Monitor and is parsing raw PML log files. You can leave ProcMon running for hours and discover 2nd and 3rd level (ie an app that loads another DLL that loads yet another DLL when you use a specific feature of the parent app) DLL Hijacking vulnerabilities. It will also automatically generate proxy DLLs with all relevant exports for vulnerable DLLs.\n\nParsing ProcMon PML files natively. The config (PMC) and log (PML) parsers have been implemented by porting partial functionality to C# from https://github.com/eronnen/procmon-parser/. You can find the format specification here.\n\nSpartacus will create proxy DLLs for all missing DLLs that were identified. For instance, if an application is vulnerable to DLL Hijacking via version.dll, Spartacus will create a version.dll.cpp file for you with all the exports included in it. Then you can insert your payload/execution technique and compile.\n\nAble to process large PML files and store all DLLs of interest in an output CSV file. Local benchmark processed a 3GB file with 8 million events in 45 seconds.\n\n[Defence] Monitoring mode trying to identify running applications proxying calls, as in \"DLL Hijacking in progress\". This is just to get any low hanging fruit and should not be relied upon.\n\nhttps://github.com/Accenture/Spartacus\n\n\u200b\u200bBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nwww.ghostclan.org\n\u200b", "creation_timestamp": "2023-03-17T08:39:13.000000Z"}, {"uuid": "5a89a0f0-9b69-4796-8873-18003c73d4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "Telegram/0m5T2oWRa_JTilHoVmSTzoaeqXYJLdSSAasB5uisMr16wUQ", "content": "", "creation_timestamp": "2022-10-12T11:14:37.000000Z"}, {"uuid": "909cd7f0-640a-4548-8a8b-5d31567c5c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "Telegram/l-OuTtmFyR4QFpCSnD7Vkipngfha_VtCiF77KFrEfeOSN1s", "content": "", "creation_timestamp": "2022-10-09T20:31:28.000000Z"}, {"uuid": "0577a70e-940d-44e7-a1a1-91d28bb0c1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/TN9gewYomTAqkh8sYExl1z2TsA1HB-34c_Og297OqbQmXSI", "content": "", "creation_timestamp": "2022-10-23T17:50:15.000000Z"}, {"uuid": "29891bb5-90e8-4fff-ac92-292abf8353dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "Telegram/1KX0arkLatluM2b5xUJe2A3qPnkcl8HWpoBGo8oQI5RoRTA", "content": "", "creation_timestamp": "2022-10-23T12:49:04.000000Z"}, {"uuid": "c6a223be-747f-4fa4-9217-c0e95812c936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/tf3hp1yPdw2gOFQXFyAkDS6xnUogxh_W4oHMSrw7cMbqhik", "content": "", "creation_timestamp": "2023-01-02T18:48:04.000000Z"}, {"uuid": "03082008-8e9a-4e72-bc6e-dc3a138bb0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "published-proof-of-concept", "source": "Telegram/6TtQSjzFGmX33VjVOjXiHX1LUXuMkgzfZZXGTqPOqAU2NDc", "content": "", "creation_timestamp": "2022-10-15T14:11:17.000000Z"}, {"uuid": "cc06d3b5-9252-48dd-a966-07a9f01e3ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/hJoPEaM8COgZEtLN1tx2kl_l9wNyCf3HFlZRp6RSb0E8UE0", "content": "", "creation_timestamp": "2022-10-15T01:25:38.000000Z"}, {"uuid": "6e001716-f235-47a5-a65a-106ac24986a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "published-proof-of-concept", "source": "Telegram/cTWG_oQ1KFCmD3LgSupGDc3y9LdXW78qR9iPVIbHPAM6N0U", "content": "", "creation_timestamp": "2022-10-19T13:06:48.000000Z"}, {"uuid": "216ab558-330b-4ec2-821a-b623df6cffd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/12037", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T18:17:33.000000Z"}, {"uuid": "bd24fc37-43bc-4fc2-b544-f9a61fcd0573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/lcmysecteamch/12036", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T18:17:33.000000Z"}, {"uuid": "ce40617e-995a-4410-866b-d2b9d215c190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/jRSE_13w95cR-zx9TkBXruZT9ZsQKHSIh9tIsxa0Gj97dTA", "content": "", "creation_timestamp": "2022-11-14T04:04:21.000000Z"}, {"uuid": "498431d9-ac48-4acc-b5a8-7c981ae09984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/iqrAeUBgELAHmMqy0rGlHL1YoZePHnQDY1cYZJ3Or7I9lRc", "content": "", "creation_timestamp": "2022-11-13T15:15:10.000000Z"}, {"uuid": "c08ee595-20a3-4bfc-8e8d-cf8e7dce47bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "Telegram/fAWPAqiGGmiCioZoRRJUTpS-505alyTv3gMvgAepMoyqmv8", "content": "", "creation_timestamp": "2022-11-09T03:50:02.000000Z"}, {"uuid": "f817b75a-e456-40d9-84bc-698338b74a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4060", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1158", "content": "", "creation_timestamp": "2023-09-13T02:18:15.000000Z"}, {"uuid": "13e1c7ac-6fa8-4236-8637-e4278e08004d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/RESOLUTEATTACK/299", "content": "CVE-2022-40684\n\nC\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e Fortinet FortiOS, FortiProxy \u0438 FortiSwitchManager, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\nE7 SUBSCRIBE\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438  #CVE  #\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b  #\u041e\u0431\u0445\u043e\u0434", "creation_timestamp": "2023-01-05T21:54:37.000000Z"}, {"uuid": "19e205d8-8cbe-42c8-ac0d-c5a4dd29005a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/zer0day1ab/438", "content": "Leaked 15k+ #FortiGate VPN accounts including configuration files and #VPN passwords via CVE-2022-40684.\n\nAffected IPs: https://github.com/arsolutioner/fortigate-belsen-leak/blob/main/affected_ips.txt\n\nOrigin: belsenacdodoy3nsmmyjfmtgjen6ipaqkti7dm2q57vabjx2vzq6tnad.onion/files/FortiGate.zip\n\nDownload: https://mega.nz/file/wDhQEC5Y#OctAHTwgv57eRbEc3nvPRb53aX5vxXFIW1HopceZXUI", "creation_timestamp": "2025-01-22T11:23:27.000000Z"}, {"uuid": "5cb3d1c0-caa6-487f-a0c4-1268c36c7357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/583", "content": "CVE-2022-40146 : Apache XML Graphics Batik 1.14 - Server-Side Request Forgery & RCE\nPOC : https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar", "creation_timestamp": "2022-11-14T21:29:01.000000Z"}, {"uuid": "5ccf2991-73d4-49f0-919e-7054175259d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/CyberSecurityIL/64878", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05dc\u05d0 \u05de\u05d5\u05db\u05e8\u05ea \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d0\u05ea\u05de\u05d5\u05dc \u05e0\u05ea\u05d5\u05e0\u05d9 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea, \u05e9\u05e0\u05d2\u05e0\u05d1\u05d5 \u05d1-2022, \u05dc\u05d0\u05dc\u05e4\u05d9 \u05de\u05db\u05e9\u05d9\u05e8\u05d9 Fortigate.\n\n\u05d0\u05ea\u05de\u05d5\u05dc \u05e0\u05d7\u05e9\u05e4\u05ea\u05d9 \u05dc\u05de\u05d9\u05d3\u05e2 \u05d0\u05d1\u05dc \u05dc\u05d0 \u05d4\u05e1\u05e4\u05e7\u05ea\u05d9 \u05dc\u05d1\u05d3\u05d5\u05e7 \u05d0\u05d5\u05ea\u05d5 \u05db\u05de\u05d5 \u05e9\u05e6\u05e8\u05d9\u05da, \u05d4\u05de\u05d9\u05d3\u05e2 \u05de\u05d7\u05d5\u05dc\u05e7 \u05dc\u05ea\u05d9\u05e7\u05d9\u05d5\u05ea \u05dc\u05e4\u05d9 \u05de\u05d3\u05d9\u05e0\u05d5\u05ea, \u05db\u05e9\u05d9\u05e9 \u05d2\u05dd \u05ea\u05d9\u05e7\u05d9\u05d9\u05d4 \u05dc-IL.\n\n\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05de\u05d7\u05d1\u05e8\u05ea heise \u05d1\u05d7\u05e0\u05d5 \u05d0\u05ea \u05d4\u05de\u05d9\u05d3\u05e2 \u05d5\u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05db\u05d9 \u05de\u05d3\u05d5\u05d1\u05e8 \u05e9\u05e0\u05d2\u05e0\u05d1 \u05d1-2022 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e0\u05d9\u05e6\u05d5\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2022-40684 \u05d5\u05db\u05d9 \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05e9\u05e0\u05e4\u05d2\u05e2\u05d5 \u05d4\u05df FortiOS 7.0.0-7.0.6 \u05d0\u05d5 7.2.0-7.2.2.\n\n\u05e2\u05d5\u05d3 \u05de\u05d0\u05de\u05ea\u05d9\u05dd \u05d4\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05db\u05d9 \u05dc\u05de\u05e8\u05d5\u05ea \u05e9\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05de\u05d9\u05d3\u05e2 \u05d9\u05e9\u05df \u05d7\u05dc\u05e7 \u05de\u05d4\u05e1\u05d9\u05e1\u05de\u05d0\u05d5\u05ea \u05e2\u05d3\u05d9\u05d9\u05df \u05ea\u05e7\u05e4\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/6413", "creation_timestamp": "2025-01-16T07:01:25.000000Z"}, {"uuid": "8ee85003-b025-4570-b4de-26509829ac89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40507", "type": "seen", "source": "https://t.me/true_secator/5162", "content": "\u041e\u0442\u043a\u043e\u043f\u0430\u0432 \u043f\u0430\u0440\u043e\u0447\u043a\u0443 0-day \u0432 Apple, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0437\u0430 Android, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 zero-click \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u0434\u0435\u043a\u0430\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 85 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445, CVE-2023-40088, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-40077, CVE-2023-40076 \u0438 CVE-2023-45866) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Android Framework \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2022-40507 - \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Qualcomm \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: 2023-12-01 \u0438 2023-12-05. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2023-12-05T10:46:49.000000Z"}, {"uuid": "d872fa3d-4ae9-460c-96f2-bbd8c9b22918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40005", "type": "exploited", "source": "https://t.me/true_secator/6651", "content": "QiAnXin XLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 cnPilot \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cambium Networks \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0442\u0430\u043c\u043c\u0430 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 AISURU \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c AIRASHI \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0432 DDoS-\u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 AIRASHI: CVE-2013-3307, CVE-2016-20016, CVE-2017-5259, CVE-2018-14558, CVE-2020-25499, CVE-2020-8515, CVE-2022-3573, CVE-2022-40005, CVE-2022-44149, CVE-2023-28771, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IP-\u043a\u0430\u043c\u0435\u0440\u0430\u0445 AVTECH, \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u0445 LILIN \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Shenzhen TVT.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0441\u0432\u043e\u0438\u0445 \u0442\u0435\u0441\u0442\u043e\u0432, DDoS-\u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c AIRASHI \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 1\u20133 \u0422\u0431\u0438\u0442/\u0441.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435 \u0438 \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438 \u041a\u0438\u0442\u0430\u0439, \u0421\u0428\u0410, \u041f\u043e\u043b\u044c\u0448\u0430 \u0438 \u0420\u043e\u0441\u0441\u0438\u044f.\n\nAIRASHI - \u044d\u0442\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 AISURU (\u043e\u043d \u0436\u0435 NAKOTNE), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f  DDoS-\u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 Steam, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u0433\u0440\u044b\u00a0Black Myth: Wukong.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0438 AIRASHI, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432 \u0441\u0435\u0431\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b DDoS.\n\nAISURU \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0441\u0432\u043e\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u0431\u043e\u0442\u043d\u0435\u0442 \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c (\u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Kitty) \u0438 \u0437\u0430\u0442\u0435\u043c \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f (\u043e\u043d\u0430 \u0436\u0435 AIRASHI).\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446 kitty \u043d\u0430\u0447\u0430\u043b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0446\u0430\u043c\u0438 AISURU \u043e\u043d \u0443\u043f\u0440\u043e\u0441\u0442\u0438\u043b \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0438 \u043a \u043a\u043e\u043d\u0446\u0443 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0441\u0442\u0430\u043b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b SOCKS5 \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c C2.\n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, AIRASHI \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445:\n\n- AIRASHI-DDoS (\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043a\u043e\u043d\u0446\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- AIRASHI-Proxy (\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e AIRASHI-DDoS \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043a\u0441\u0438.\n\n\u0411\u043e\u0442\u043d\u0435\u0442, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2 \u0447\u0435\u0440\u0435\u0437 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 HMAC-SHA256 \u0438 CHACHA20 \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, AIRASHI-DDoS \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 13 \u0442\u0438\u043f\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a AIRASHI-Proxy \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u044f\u0442\u044c \u0442\u0438\u043f\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u0430\u043a \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0449\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a.", "creation_timestamp": "2025-01-23T18:41:16.000000Z"}, {"uuid": "7594262e-c964-4289-b9bc-508f9fd2034b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/true_secator/6627", "content": "\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043d\u043e\u0432\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043b\u0438\u043b\u0438 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 15\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\u0441\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e.\n\n\u0410\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 Belsen Group \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0435\u0442\u044f\u0445 \u0438 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0431\u0440\u0435\u043d\u0434\u0430 Belsen Group \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 \u0432 Tor, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0430\u043c\u043f \u0434\u0430\u043d\u043d\u044b\u0445 FortiGate.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 FortiGate \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u0440\u0445\u0438\u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 1,6 \u0413\u0411 \u0441 \u043f\u0430\u043f\u043a\u0430\u043c\u0438, \u0443\u043f\u043e\u0440\u044f\u0434\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0441\u0442\u0440\u0430\u043d\u0430\u043c. \u041a\u0430\u0436\u0434\u0430\u044f \u043f\u0430\u043f\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u043f\u0430\u043f\u043a\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430 FortiGate \u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u041a\u0435\u0432\u0438\u043d\u0430 \u0411\u043e\u043c\u043e\u043d\u0442\u0430, \u043a\u0430\u0436\u0434\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u043c\u0435\u0435\u0442 configuration.conf \u0438 vpn-passwords.txt, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0442\u0435\u0447\u043a\u0430, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 0-day \u043e\u0442 2022 \u0433\u043e\u0434\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0411\u043e\u043c\u043e\u043d\u0434 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 CVE-2022\u201340684, \u0438 \u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u043c\u043f\u0435, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 \u0432 2022 \u0433\u043e\u0434\u0443 Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0443\u043b\u044f, CVE-2022\u201340684,\u00a0\u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 super_admin \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abfortigate-tech-support\u00bb.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u044f Heise \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 FortiOS 7.0.0-7.0.6 \u0438\u043b\u0438 7.2.0-7.2.2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432\u0435\u0440\u0441\u0438\u0435\u0439 7.2.0.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043d\u044b \u0432 2022 \u0433\u043e\u0434\u0443, \u043e\u043d\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c \u043c\u043e\u043c\u0435\u043d\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u0442\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u0435 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u044c\u0441\u044f \u0441 2021, \u043a\u043e\u0433\u0434\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043b\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 500 000 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Fortinet VPN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2018-13379, \u043d\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442.", "creation_timestamp": "2025-01-16T17:27:00.000000Z"}, {"uuid": "148e5011-beda-4486-b589-c76747700e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40981", "type": "seen", "source": "https://t.me/true_secator/4051", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT.\n\n\u0412 \u0440\u0430\u043c\u0430\u0445 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 Otorio \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0440\u0435\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 OT.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0442\u044f\u043c OT, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0430\u043a\u0442\u043e\u0440\u0443 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 OT \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-3703, CVE-2022-41607 \u0438 CVE-2022-40981) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAS) ETIC Telecom \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041f\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f\u00a0InHand Networks InRouter 302 \u0438 InRouter 615, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u00ab\u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438).\n\n\u0412\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 InRouter \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 Sierra Wireless AirLink Router (CVE-2022-46649 \u0438 CVE-2022-46650).\n\n\u0411\u0430\u0433\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\u00a0\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 - \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0435\u0442\u0438 OT \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443, \u0435\u0441\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IIoT \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u043e\u0442\u043a\u0430\u0437\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b Wi-Fi \u0438\u043b\u0438 \u0441\u043e\u0442\u043e\u0432\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b, \u043c\u043e\u0433\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u00ab\u043f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb AitM \u0441 \u043d\u0435\u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c.\n\n\u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u0440\u044c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u00a0\u0441\u043b\u0430\u0431\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00a0\u0434\u043e\u00a0\u0430\u0442\u0430\u043a \u0441\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f,\u00a0\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0447\u0438\u043f\u044b, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Otorio, \u0434\u043b\u044f \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a\u00a0WiGLE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0447\u0442\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u0438\u0445 \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0439 Wi-Fi, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.", "creation_timestamp": "2023-02-10T11:50:07.000000Z"}, {"uuid": "605fa4bd-dcc4-4368-9881-912d787f5a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/true_secator/4644", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Eclypsium \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e Baseboard Management Controller (BMC) \u043e\u0442 American Megatrends (AMI).\n\nBMC \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a \u041e\u0421 \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0435\u0449\u0435 \u0440\u044f\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u0434\u0435\u043b\u0430\u0435\u0442 BMC \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e BMC, \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 AMI, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Ampere, Asrock, Asus, Arm, Dell, Gigabyte, HPE, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 Eclypsium, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 HTTP, \u0430 \u0442\u0430\u043a\u0436\u0435 RCE.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043c\u0435\u0441\u0442\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 \u0438 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f BMC, \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u043c\u0430\u043d\u0443\u0432 BMC http-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-34329 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.1) \u0438 CVE-2023-34330 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.2) \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0430 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u0431\u0430\u0433\u043e\u0432 \u043e\u0431\u0449\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10 \u0438\u0437 10.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e Redfish \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0447\u0438\u043f\u0435 BMC \u0441 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 CVE-2022-40258 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a \u043d\u0430\u0431\u043e\u0440\u0443 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 AMI MegaRAC BMC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BMC&C, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 (CVE-2022-40259, CVE-2022-40242 \u0438 CVE-2022-2827) \u0438 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 (CVE-2022-26872 \u0438 CVE-2022-40258).\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u044d\u0442\u0438 \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 BMC, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c BMC, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u043d\u0435\u043c\u0443.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0434\u043b\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-07-21T15:30:05.000000Z"}, {"uuid": "b1d45730-c5a9-41aa-8765-c57d4b35d683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40258", "type": "seen", "source": "https://t.me/true_secator/4644", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Eclypsium \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e Baseboard Management Controller (BMC) \u043e\u0442 American Megatrends (AMI).\n\nBMC \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a \u041e\u0421 \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0435\u0449\u0435 \u0440\u044f\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u0434\u0435\u043b\u0430\u0435\u0442 BMC \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e BMC, \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 AMI, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Ampere, Asrock, Asus, Arm, Dell, Gigabyte, HPE, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 Eclypsium, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 HTTP, \u0430 \u0442\u0430\u043a\u0436\u0435 RCE.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043c\u0435\u0441\u0442\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 \u0438 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f BMC, \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u043c\u0430\u043d\u0443\u0432 BMC http-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-34329 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.1) \u0438 CVE-2023-34330 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.2) \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0430 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u0431\u0430\u0433\u043e\u0432 \u043e\u0431\u0449\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10 \u0438\u0437 10.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e Redfish \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0447\u0438\u043f\u0435 BMC \u0441 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 CVE-2022-40258 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a \u043d\u0430\u0431\u043e\u0440\u0443 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 AMI MegaRAC BMC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BMC&C, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 (CVE-2022-40259, CVE-2022-40242 \u0438 CVE-2022-2827) \u0438 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 (CVE-2022-26872 \u0438 CVE-2022-40258).\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u044d\u0442\u0438 \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 BMC, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c BMC, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u043d\u0435\u043c\u0443.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0434\u043b\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-07-21T15:30:05.000000Z"}, {"uuid": "3ac53cd0-4124-4489-b016-22bdfa39fd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40318", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/4346", "content": "\u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b BGP, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043e\u0431\u043c\u0435\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (AS) \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0440\u044f\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u044f\u043c \u0438 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Forescout \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f DoS \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0437\u043b\u0430\u0445 BGP.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 8.4 FRRouting \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux \u0438 Unix \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a NVIDIA Cumulus, DENT \u0438 SONiC, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 CVE-2022-40302, CVE-2022-40318 \u0438 CVE-2022-43681 (\u0432\u0441\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 6,5), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f BGP OPEN.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0445 Forescout Vedere: FRRouting, BIRD, OpenBGPD, Mikrotik RouterOS, Juniper JunOS, Cisco IOS \u0438 Arista EOS.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u0431\u043e\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 BGP-\u043f\u0438\u0440\u043e\u0432 \u0438 \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0441\u0435\u0441\u0441\u0438\u0439.\n\nForescout \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 BGP Fuzzer \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 BGP.", "creation_timestamp": "2023-05-03T20:01:57.000000Z"}, {"uuid": "4205083f-554f-45d0-bc76-55d93d555c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40302", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/4346", "content": "\u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b BGP, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043e\u0431\u043c\u0435\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (AS) \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0440\u044f\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u044f\u043c \u0438 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Forescout \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f DoS \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0437\u043b\u0430\u0445 BGP.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 8.4 FRRouting \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux \u0438 Unix \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a NVIDIA Cumulus, DENT \u0438 SONiC, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 CVE-2022-40302, CVE-2022-40318 \u0438 CVE-2022-43681 (\u0432\u0441\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 6,5), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f BGP OPEN.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 BGP, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0445 Forescout Vedere: FRRouting, BIRD, OpenBGPD, Mikrotik RouterOS, Juniper JunOS, Cisco IOS \u0438 Arista EOS.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u0431\u043e\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 BGP-\u043f\u0438\u0440\u043e\u0432 \u0438 \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0441\u0435\u0441\u0441\u0438\u0439.\n\nForescout \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 BGP Fuzzer \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 BGP.", "creation_timestamp": "2023-05-03T20:01:57.000000Z"}, {"uuid": "69c55621-13b1-4411-87ea-81afc54afa03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/true_secator/3789", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e MegaRAC Baseboard Management Controller (BMC) \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 American Megatrends \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0426\u041e\u0414\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Eclypsium \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC.\n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u00ab\u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e\u00bb \u0438 \u00ab\u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e\u00bb \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u043e\u043d\u0438 \u0441\u0442\u043e\u044f\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Eclypsium \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2022-40259\u00a0(RCE-\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, CVSS v3.1: 9,9)\n- CVE-2022-40242 (\u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, CVSS v3.1: 8,3)\n- CVE-2022-2827 (\u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, CVSS v3.1: 7,5).\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-40259, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 API.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2022-40242 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443. \n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0431\u0440\u0443\u0442\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447, \u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438, \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u044d\u0442\u0430\u043f\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0443 \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Redfish, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2022-12-06T11:54:10.000000Z"}, {"uuid": "807237f7-23f7-4db1-bedf-9fe78b9e3be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/true_secator/3789", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e MegaRAC Baseboard Management Controller (BMC) \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 American Megatrends \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0426\u041e\u0414\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Eclypsium \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC.\n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u00ab\u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e\u00bb \u0438 \u00ab\u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e\u00bb \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u043e\u043d\u0438 \u0441\u0442\u043e\u044f\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Eclypsium \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2022-40259\u00a0(RCE-\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, CVSS v3.1: 9,9)\n- CVE-2022-40242 (\u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, CVSS v3.1: 8,3)\n- CVE-2022-2827 (\u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, CVSS v3.1: 7,5).\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-40259, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 API.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2022-40242 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443. \n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0431\u0440\u0443\u0442\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447, \u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438, \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u044d\u0442\u0430\u043f\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0443 \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Redfish, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2022-12-06T11:54:10.000000Z"}, {"uuid": "07bbd3c8-aea1-4353-bd8f-2f12d0b5da0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/true_secator/4644", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Eclypsium \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e Baseboard Management Controller (BMC) \u043e\u0442 American Megatrends (AMI).\n\nBMC \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a \u041e\u0421 \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0435\u0449\u0435 \u0440\u044f\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u0434\u0435\u043b\u0430\u0435\u0442 BMC \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e BMC, \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 AMI, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Ampere, Asrock, Asus, Arm, Dell, Gigabyte, HPE, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 Eclypsium, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 HTTP, \u0430 \u0442\u0430\u043a\u0436\u0435 RCE.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043c\u0435\u0441\u0442\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 \u0438 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f BMC, \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u043c\u0430\u043d\u0443\u0432 BMC http-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-34329 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.1) \u0438 CVE-2023-34330 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.2) \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0430 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u0431\u0430\u0433\u043e\u0432 \u043e\u0431\u0449\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10 \u0438\u0437 10.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e Redfish \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0447\u0438\u043f\u0435 BMC \u0441 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 CVE-2022-40258 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a \u043d\u0430\u0431\u043e\u0440\u0443 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 AMI MegaRAC BMC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BMC&C, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 (CVE-2022-40259, CVE-2022-40242 \u0438 CVE-2022-2827) \u0438 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 (CVE-2022-26872 \u0438 CVE-2022-40258).\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u044d\u0442\u0438 \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 BMC, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Eclypsium \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c BMC, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u043d\u0435\u043c\u0443.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0434\u043b\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-07-21T15:30:05.000000Z"}, {"uuid": "e6d9d211-36e4-4c0d-94d9-7b1c2cc43607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/true_secator/4711", "content": "\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u044c\u0432\u0438\u043d\u0443\u044e \u0434\u043e\u043b\u044e \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Google \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u041c\u043e\u0433\u0438\u043c\u0438 \u0438 \u043d\u0430\u0437\u0432\u0430\u043b \u0435\u0435 Downfall. \n\n\u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440, \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u0445.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0435 \u0438\u0437 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 Downfall \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0440\u0435\u043a\u0432\u0438\u0437\u0438\u0442\u044b, \u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\u0411\u0430\u0433 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-40982. \u041f\u043e\u0447\u0435\u043c\u0443 2022? \u0414\u0430 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e Intel \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0435\u0449\u0435 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430, \u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u044b\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043d\u043e \u0441 \u043f\u043e\u0442\u0435\u0440\u0435\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Intel \u043e\u0442 Skylake \u0434\u043e Ice Lake.\n\n\u041f\u043e \u0435\u0433\u043e \u0441\u043b\u043e\u0432\u0430\u043c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0432 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445, \u0442\u0430\u043a \u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nIntel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u043e 50 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043e\u0432. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u041f\u041a \u0438\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel Core \u043e\u0442 6-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u00abSkylake\u00bb \u0434\u043e 11-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u00abTiger Lake\u00bb, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2015 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d Skylake.\n\n\u041f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel Xeon \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438 \u0438\u0437-\u0437\u0430 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442.", "creation_timestamp": "2023-08-10T10:42:34.000000Z"}, {"uuid": "01d381ba-1610-48ce-a6b6-6b319d7fab96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40144", "type": "seen", "source": "https://t.me/true_secator/3413", "content": "\u034fTrend Micro \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 0-day, \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Apex One.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-40139 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\u00a0\u041e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Trend Micro, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0442\u043a\u0430\u0442\u0430.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a 0-day \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Apex One \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0438 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u2014 CVE-2022-40144, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\u00a0\n\n\u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u043c 0-day \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u043e\u0431 \u044d\u0442\u043e\u043c Trend Micro \u043d\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2022-40144 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 Trend Micro, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2022-40139 Trend Micro \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430. \u041d\u043e \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e\u00a0\u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e\u0441\u0435\u043c\u044c \u0442\u0430\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438\u00a0\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Apex. \u0411\u0430\u0433\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2022-09-14T14:27:02.000000Z"}, {"uuid": "dd224b8d-50b6-49c8-9265-6d983e9e40cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/true_secator/3565", "content": "\u0414\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 FortiOS, FortiProxy \u0438 FortiSwitchManager \u043e\u0442 Fortinet, \u0441\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\nCVE-2022-40684 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435. Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0447\u0435\u0442\u0432\u0435\u0440\u0433.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Horizon3.ai \u0414\u0436\u0435\u0439\u043c\u0441 \u0425\u043e\u0440\u0441\u043c\u0430\u043d \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u043b\u044e\u0447\u0430 SSH \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0445\u043e\u0447\u0435\u0442, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0446\u0438\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0438 \u0432 Fortinet.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0430\u0448\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430: user=\" Local_Process_Access\", user_interface=\" Node.js\" \u0438\u043b\u0438 user_interface=\" Report Runner\".\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438.", "creation_timestamp": "2022-10-14T17:00:05.000000Z"}, {"uuid": "635af9e5-52c4-4d14-bb44-73bca40833d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40619", "type": "seen", "source": "https://t.me/true_secator/3437", "content": "Onekey \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u044f\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f RCE \u0447\u0435\u0440\u0435\u0437 FunJSQ, \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u0438\u0433\u0440.\n\n\u041c\u043e\u0434\u0443\u043b\u044c \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0433\u0440, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Netgear \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Wi-Fi Orbi, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Xiamen Xunwang Network Technology.\n\nOnekey \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e\u00a0\u043c\u043e\u0434\u0443\u043b\u044c FunJSQ \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0445\u044d\u0448\u0430.\n\n\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0441\u0432\u044f\u0437\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e-\u043b\u0438\u0431\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 WAN.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Netgear, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0440\u0435\u0431\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u043c\u0435\u043b \u043f\u0430\u0440\u043e\u043b\u044c WiFi \u0438\u043b\u0438 Ethernet-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-40619 (\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438) \u0438 CVE-2022-40620 (\u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f). \u041d\u0438 Onekey, \u043d\u0438 Netgear \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nNetgear \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0438\u044e\u043d\u0435 \u0438 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Orbi WiFi RBR20, RBR50, RBS20 \u0438 RBS50, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 R6230, R6260, R7000, R8900, R9000, RAX120, RAX120v2 \u0438 XR300.\n\nNetgear \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2022-09-19T15:49:50.000000Z"}, {"uuid": "9f340297-b777-4ca3-b7af-2a33126a55fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40620", "type": "seen", "source": "https://t.me/true_secator/3437", "content": "Onekey \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u044f\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f RCE \u0447\u0435\u0440\u0435\u0437 FunJSQ, \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u0438\u0433\u0440.\n\n\u041c\u043e\u0434\u0443\u043b\u044c \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0433\u0440, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Netgear \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Wi-Fi Orbi, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Xiamen Xunwang Network Technology.\n\nOnekey \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e\u00a0\u043c\u043e\u0434\u0443\u043b\u044c FunJSQ \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0445\u044d\u0448\u0430.\n\n\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0441\u0432\u044f\u0437\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e-\u043b\u0438\u0431\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 WAN.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Netgear, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0440\u0435\u0431\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u043c\u0435\u043b \u043f\u0430\u0440\u043e\u043b\u044c WiFi \u0438\u043b\u0438 Ethernet-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-40619 (\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438) \u0438 CVE-2022-40620 (\u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f). \u041d\u0438 Onekey, \u043d\u0438 Netgear \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nNetgear \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0438\u044e\u043d\u0435 \u0438 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Orbi WiFi RBR20, RBR50, RBS20 \u0438 RBS50, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 R6230, R6260, R7000, R8900, R9000, RAX120, RAX120v2 \u0438 XR300.\n\nNetgear \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2022-09-19T15:49:50.000000Z"}, {"uuid": "e262ee40-0110-4950-90b6-f279a13386b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://t.me/true_secator/3413", "content": "\u034fTrend Micro \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 0-day, \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Apex One.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-40139 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\u00a0\u041e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Trend Micro, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0442\u043a\u0430\u0442\u0430.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a 0-day \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Apex One \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0438 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u2014 CVE-2022-40144, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\u00a0\n\n\u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u043c 0-day \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u043e\u0431 \u044d\u0442\u043e\u043c Trend Micro \u043d\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2022-40144 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 Trend Micro, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2022-40139 Trend Micro \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430. \u041d\u043e \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e\u00a0\u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e\u0441\u0435\u043c\u044c \u0442\u0430\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438\u00a0\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Apex. \u0411\u0430\u0433\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2022-09-14T14:27:02.000000Z"}, {"uuid": "b458dd2c-91b8-44c2-a528-b3f9b550c922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40304", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3696", "content": "\u041d\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u043e, \u0447\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0418\u0422-\u0433\u0438\u0433\u0430\u043d\u0442\u043e\u043c \u0438\u0437 \u041a\u0443\u043f\u0435\u0440\u0442\u0438\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS \u0438 macOS \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libxml2.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f C \u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Gnome, libxml2 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u0411\u0430\u0433\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-40303 \u0438 CVE-2022-40304 \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043b\u0438 RCE.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Apple \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u043f\u043e \u0446\u0435\u0445\u0443 \u0438\u0437 Google Project Zero.\n\nApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 macOS Ventura 13.0.1 \u0438 iOS 16.1.1 \u0438 iPadOS 16.1.1 (\u0434\u043b\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad Pro (\u0432\u0441\u0435 \u043c\u043e\u0434\u0435\u043b\u0438), iPad Air 3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, iPad 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u0438 iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435).\n\n\u0417\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 Apple \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 CVE-2022-40303, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e CVE-2022-40304, \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b, \u0447\u0442\u043e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 Apple.", "creation_timestamp": "2022-11-11T15:50:04.000000Z"}, {"uuid": "5cbf20c6-7ac5-4f2f-9abc-4e30d593a55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3696", "content": "\u041d\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u043e, \u0447\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0418\u0422-\u0433\u0438\u0433\u0430\u043d\u0442\u043e\u043c \u0438\u0437 \u041a\u0443\u043f\u0435\u0440\u0442\u0438\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS \u0438 macOS \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libxml2.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f C \u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Gnome, libxml2 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u0411\u0430\u0433\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-40303 \u0438 CVE-2022-40304 \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043b\u0438 RCE.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Apple \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u043f\u043e \u0446\u0435\u0445\u0443 \u0438\u0437 Google Project Zero.\n\nApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 macOS Ventura 13.0.1 \u0438 iOS 16.1.1 \u0438 iPadOS 16.1.1 (\u0434\u043b\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad Pro (\u0432\u0441\u0435 \u043c\u043e\u0434\u0435\u043b\u0438), iPad Air 3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, iPad 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u0438 iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435).\n\n\u0417\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 Apple \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 CVE-2022-40303, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e CVE-2022-40304, \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b, \u0447\u0442\u043e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 Apple.", "creation_timestamp": "2022-11-11T15:50:04.000000Z"}, {"uuid": "81d75feb-89af-407b-b74a-cbf64a3e4da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40903", "type": "seen", "source": "https://t.me/true_secator/3707", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Aiphone \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442  \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u041a\u0423\u0414 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0435.\n\nAiphone \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043c\u0438\u0440\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0443\u0434\u0438\u043e- \u0438 \u0432\u0438\u0434\u0435\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0436\u0438\u043b\u044b\u0445 \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0437\u0434\u0430\u043d\u0438\u0439.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Promon \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CVE-2022-40903 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Aiphone \u0441\u0435\u0440\u0438\u0438 GT-DMB, GT-DMB-N \u0438 GT-DMB-LVN (\u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043e 3.00) \u0438 GT-DB-VN (\u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 2.00 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c\u0438).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0438\u044e\u043d\u0435 2021 \u0433\u043e\u0434\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043b\u0435\u0433\u043a\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0445\u043e\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u0435\u0433\u0430 NFC.\n\n\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0431\u0440\u0443\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 NFC \u043f\u0435\u0440\u0435\u0431\u0440\u0430\u0442\u044c \u0432\u0441\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u0445\u0437\u043d\u0430\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0435\u0433\u0430 NFC \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0437\u0434\u0430\u043d\u0438\u0435.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Aiphone \u043d\u0435 \u0445\u0440\u0430\u043d\u044f\u0442 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u0443\u0435\u0442 \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u0432\u0435\u0434\u0435\u043d\u0438\u0438  \u043e \u043a\u0430\u043a\u043e\u043c-\u043b\u0438\u0431\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n\u041d\u043e \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e, \u0442\u0440\u0435\u0431\u0443\u044f \u043f\u043e\u043b\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u043d\u044b \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n10 \u043d\u043e\u044f\u0431\u0440\u044f Aiphone \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u043d\u0430\u0434\u0435\u0436\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2022-11-15T14:59:03.000000Z"}, {"uuid": "98931fcb-3c13-45c6-9a93-18e7b2c0c89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/true_secator/3536", "content": "Fortinet \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate \u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684\u00a0\u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,6 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 HTTP \u0438\u043b\u0438 HTTPS.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS \u0441 7.0.0 \u0434\u043e 7.0.6 \u0438 \u0441 7.2.0 \u0434\u043e 7.2.1, FortiProxy \u0441 7.0.0 \u043d\u0430 7.0.6 \u0438 7.2.0. Fortinet \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0441 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 FortiOS 7.0.7\u00a0\u0438\u00a07.2.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445\u00a0FortiProxy 7.0.7\u00a0\u0438\u00a07.2.1. \n\n\u041f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u043f\u043e\u0438\u0441\u043a\u0443 Shodan, \u0431\u043e\u043b\u0435\u0435 100 000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 FortiGate \u0432 \u0441\u0435\u0442\u0438, Fortinet \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 HTTPS \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u043b\u0438, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438.", "creation_timestamp": "2022-10-10T14:35:04.000000Z"}, {"uuid": "2add2fda-a834-4bc8-9a57-34bd574308bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40129", "type": "seen", "source": "https://t.me/true_secator/3700", "content": "\u041c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 RCE-\u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u041f\u041e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Foxit Reader.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445\u00a0\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 JavaScript Foxit Reader, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2022-32774, CVE-2022-38097, CVE-2022-37332 \u0438 CVE-2022-40129 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u041e \u043d\u0438\u0445 Cisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 Foxit \u0435\u0449\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435.\u00a0\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Cisco, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u043d\u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0436\u0435\u043b\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u0415\u0441\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Foxit \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e, \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u044b, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\nFoxit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e 12.0.1.124306 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0443\u044e \u0432\u0441\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\u00a0\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "creation_timestamp": "2022-11-14T12:09:05.000000Z"}, {"uuid": "f4898a15-458f-4bb0-8461-ac027f98512d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/true_secator/3655", "content": "Fortinet \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u0435\u0441\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiTester \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\nFortiSIEM \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Glassfish \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0438 \u043e\u0442\u0440\u0430\u0436\u0430\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS).\n\n\u041e\u043d\u0438 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 FortiADC, FortiDeceptor, FortiManager \u0438 FortiAnalyzer.\u00a0\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 FortiOS, FortiTester, FortiSOAR, FortiMail, FortiEDR CollectorWindows, FortiClient \u0434\u043b\u044f Mac \u0438 FortiADC.\n\n\u0418\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, XSS-\u0430\u0442\u0430\u043a, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, DoS-\u0430\u0442\u0430\u043a, \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u043a\u0430\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 CVE-2022-40684 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager.\n\n\u041e\u043d\u0430 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u00a0\u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b\u00a0\u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0412\u0435\u0434\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435\u00a0\u0441\u043f\u0435\u0448\u0438\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2022-11-03T09:20:03.000000Z"}, {"uuid": "0c12e537-5ba0-46b3-a349-9235eccb992e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40602", "type": "seen", "source": "https://t.me/true_secator/3876", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c ReSolver\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 ZyXEL LTE3301-M209 LTE.\n\nCVE-2022-40602 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 Telnet \u0432 D-Link DWR-921. \u041e\u043d \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b ELF, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u0432 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 amit, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u043b\u0430\u0437\u0435\u0439\u043a\u0443 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 D-Link.\n\n\u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043b\u0438\u044f\u043d\u0438\u0435 3 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432, \u0440\u0430\u0437\u0434\u0435\u043b LZMA \u2014 \u044d\u0442\u043e \u044f\u0434\u0440\u043e, \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 0x148CD6 \u2014 root-fs, \u0430 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 0x90BD36 \u2014 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 www.\n\n\u0412\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 Squashfs \u0435\u0441\u0442\u044c \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 0x10 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0431\u0430\u0439\u0442\u044b Zlib. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u043d\u0430\u0448\u0435\u043b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Telnet, \u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0447\u0442\u043e-\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 \u043d\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435. \n\n12 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u043e\u043d \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b ZyXEL \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f ZyXEL \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0431\u0430\u0433\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u044c LTE3301-M209.\n\n19 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u043e\u0448\u0438\u0431\u043a\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVE, \u0430 22 \u043d\u043e\u044f\u0431\u0440\u044f \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ZyXEL \u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\u00a0\n\nZyxel PSIRT \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.", "creation_timestamp": "2022-12-26T13:30:07.000000Z"}, {"uuid": "211b4398-bf46-4e26-a866-78edabea0ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/true_secator/3763", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cyble \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0431\u0440\u043e\u043a\u0435\u0440\u043e\u0432 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (IAB) \u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet.\n\nCVE-2022-40684\u00a0\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b FortiOS, FortiProxy \u0438 FortiSwitchManager \u0438 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0445\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b HTTP \u0438\u043b\u0438 HTTPS \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0411\u0430\u0433\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a SSH \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 SSH \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0438\u043c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cyble, \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0431\u043e\u043b\u0435\u0435 100 000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 FortiGate, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u044e\u0431\u043e\u0439 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u043b\u0447\u0435\u043d\u043d\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0432\u043f\u043e\u043b\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0443\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c\u00a0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CVE-2022-40684.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043b \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Fortinet VPN \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cyble, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Fortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u0441 17 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.\n\n\u0421\u0430\u043c Fortinet \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u00a0\u0440\u0430\u0441\u0442\u0443\u0449\u0438\u043c \u0447\u0438\u0441\u043b\u043e\u043c \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2022-40684, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e PoC.", "creation_timestamp": "2022-11-30T11:21:49.000000Z"}, {"uuid": "441ec1b0-bd63-42b8-8a93-8c15cfcca2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4048", "type": "seen", "source": "https://t.me/true_secator/3768", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u043e\u0442 CODESYS \u0438 Festo, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS).\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u043a\u043e\u0438\u0445 \u0432\u0430\u0433\u043e\u043d \u0438 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0430\u044f \u0442\u0435\u043b\u0435\u0436\u043a\u0430, \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Forescout Vedere Labs, \u043f\u0440\u0438\u0447\u0435\u043c \u0441 \u043b\u044c\u0432\u0438\u043d\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u043a\u0438 \u0432 \u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u043b\u0438\u0431\u043e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043b\u0438\u0431\u043e \u043d\u0435\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2022-3270 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 Festo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Festo Generic Multicast (FGMC) \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0414\u0440\u0443\u0433\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a DoS \u0442\u0430\u043a\u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Festo (CVE-2022-3079, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 (\u00abcec-reboot.php\u00bb), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u041f\u041b\u041a Festo CPX-CEC-C1 \u0438 CPX-CMXX \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CODESYS V3 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u0434\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-4048 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 7,7 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u0434\u0440\u044b\u0432\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438.\n\nForescout \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CODESYS, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b Festo CPX-CEC-C1 (CVE-2022-31806 \u0438 CVE-2022-22515), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Control, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443.\n\n\u0414\u0430\u0431\u044b \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2022-12-01T09:11:42.000000Z"}, {"uuid": "e684e105-8d94-437c-a655-3afe26e5ad34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/true_secator/3758", "content": "Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0441 \u0447\u0438\u043f\u043e\u043c Trusted Platform Module (TPM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c Secure Boot \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c ESET\u00a0\u041c\u0430\u0440\u0442\u0438\u043d \u0421\u043c\u043e\u043b\u0430\u0440 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020\u00a0\u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 UEFI.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438).\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u041e\u0421 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 Acer Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G.\n\nAcer \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c BIOS \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\nLenovo, \u043a \u0441\u043b\u043e\u0432\u0443,\u00a0\u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 UEFI Secure Boot, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 ESET \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 ThinkBook, IdeaPad \u0438 Yoga, \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 Lenovo \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0440\u0430\u043d\u043d\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438\u0437 \u041e\u0421.", "creation_timestamp": "2022-11-29T11:07:05.000000Z"}, {"uuid": "16df0e2b-f62d-4e43-a708-59680186011a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40258", "type": "seen", "source": "https://t.me/true_secator/4011", "content": "\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u043f\u043e\u0440\u0446\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends.\n\n\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u043a\u0430\u043a \u0432 AMI MegaRAC Baseboard Management Controller (BMC) \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0421\u043e\u0444\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0438\u0437 Eclypsium \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0430\u0433\u0438.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439, \u043c\u043e\u0433\u043b\u0438 \u0434\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0426\u041e\u0414\u0430\u0445 \u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 15 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Asus, ARM, Dell, EMC, Hewlett-Packard Enterprise, Huawei, Lenovo \u0438 Nvidia.\n\n\u0414\u0432\u0430 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 API (CVE-2022-26872 \u0441 CVSS: 8,3) \u0438 \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u0445\u044d\u0448\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f Redfish \u0438 API (CVE-2022-40258 \u0441 CVSS: 5,3).\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2022-26872 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 HTTP API, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0430\u043a \u0441 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0435\u0439 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e MegaRAC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f MD5 \u0441 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u043e\u043b\u044c\u044e \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043b\u0438 SHA-512 \u0441 \u0441\u043e\u043b\u044c\u044e \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 BMC \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0438\u043b\u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0441\u0443\u0431\u044a\u0435\u043a\u0442 \u0443\u0433\u0440\u043e\u0437\u044b \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438.\n\n\u041b\u0430\u043d\u0434\u0448\u0430\u0444\u0442 \u0443\u0433\u0440\u043e\u0437 \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d, \u043d\u043e \u0432 Eclypsium \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0441 AMI \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0443\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0443\u0441\u043b\u0443\u0433.\n\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438.\n\nGigabyte, Hewlett Packard Enterprise, Intel \u0438 Lenovo \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0430 NVIDIA \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u0432 \u043c\u0430\u0435 2023 \u0433\u043e\u0434\u0430.", "creation_timestamp": "2023-02-01T13:41:32.000000Z"}, {"uuid": "7c61d8cd-e601-4907-9f06-878f1fdbcbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/VAbHA6edjx_CNaf0OfN8EtqBnBj6QPWvszVqXISogqTAXwo", "content": "", "creation_timestamp": "2022-10-28T18:54:11.000000Z"}, {"uuid": "4e971875-a0eb-4752-8e03-a1c0a126f65f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/34113", "content": "https://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-19T15:29:51.000000Z"}, {"uuid": "bd815eb9-8373-4310-a119-175e4849a2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/26903", "content": "https://github.com/carlosevieira/CVE-2022-40684", "creation_timestamp": "2022-10-14T16:13:44.000000Z"}, {"uuid": "4e6c3e49-cc8f-4deb-83bf-1036f56c25a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/26902", "content": "https://github.com/horizon3ai/CVE-2022-40684", "creation_timestamp": "2022-10-14T16:03:24.000000Z"}, {"uuid": "59cf9529-74f9-45dd-aa90-00a29886a322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1424", "content": "https://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-20T22:47:46.000000Z"}, {"uuid": "3ba4ad78-bcb0-4c55-b084-3d9608dcfdc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1319", "content": "", "creation_timestamp": "2022-11-01T15:16:16.000000Z"}, {"uuid": "97d45812-7d36-4c09-9d02-403cae506654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40744", "type": "seen", "source": "https://t.me/ctinow/192572", "content": "https://ift.tt/4IxpmTo\nCVE-2022-40744 | IBM Aspera Faspex 5.0.6 Web UI cross site scripting (XFDB-236441)", "creation_timestamp": "2024-02-24T13:11:34.000000Z"}, {"uuid": "aa58748e-1849-411b-97f5-67fd54aeefe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40896", "type": "seen", "source": "https://t.me/ctinow/182542", "content": "https://ift.tt/TWaQ6Lw\nCVE-2022-40896 | Oracle Utilities Network Management System 2.6.0.0/2.6.0.1 NMS Monitor denial of service", "creation_timestamp": "2024-02-10T12:41:35.000000Z"}, {"uuid": "8ca9bddc-5af4-443f-99b1-5cf3f5d0cc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185494", "content": "https://ift.tt/TP4JQd2\nCVE-2022-40700 | Admin CSS MU Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T13:21:48.000000Z"}, {"uuid": "8fda58e6-dc40-4731-b876-103bbc555035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185493", "content": "https://ift.tt/SdOGMw9\nCVE-2022-40700 | AMP Toolbox Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T13:21:47.000000Z"}, {"uuid": "ce6176bd-22d5-4af8-9734-5442a797e836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185492", "content": "https://ift.tt/FK3pDbm\nCVE-2022-40700 | Confirm Data Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T13:21:45.000000Z"}, {"uuid": "3124ea26-1fa3-4b1b-a2eb-265db2c5fd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185435", "content": "https://ift.tt/v8QE6ae\nCVE-2022-40700 | ArcStone Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T11:51:06.000000Z"}, {"uuid": "3f4b2f65-46a3-4b8e-85d3-07490e7e7c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185447", "content": "https://ift.tt/qvESj1T\nCVE-2022-40700 | Styles Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:17:11.000000Z"}, {"uuid": "52d5a70d-93d7-4034-ac1d-50b01d201e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185446", "content": "https://ift.tt/J3erGSV\nCVE-2022-40700 | Theme Minifier Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:17:10.000000Z"}, {"uuid": "cc3d9bd3-303a-4bcd-8bc2-fdd333ffebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185445", "content": "https://ift.tt/tSuQqPR\nCVE-2022-40700 | WooSupply Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:17:09.000000Z"}, {"uuid": "9b3e30d0-91d7-4c9d-bc4f-546b2ba4bea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185469", "content": "https://ift.tt/M7fBeCQ\nCVE-2022-40700 | Page Builder Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:51:10.000000Z"}, {"uuid": "9ed2f1c3-021b-4357-a58f-75440f471a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185472", "content": "https://ift.tt/TqwKhPU\nCVE-2022-40700 | CSS Adder Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:51:14.000000Z"}, {"uuid": "ec5c89d4-6c1b-4915-9a1c-ce353112f58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185471", "content": "https://ift.tt/ecFiAs7\nCVE-2022-40700 | Custom Login Admin Front-end CSS Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:51:13.000000Z"}, {"uuid": "e675cbec-ce9f-4908-83b6-0bf2931d9381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185470", "content": "https://ift.tt/Bj0gpO9\nCVE-2022-40700 | PHPFreeChat Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:51:12.000000Z"}, {"uuid": "d378b1ca-13ce-4000-bd6e-51223faa742d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185433", "content": "https://ift.tt/9PT23HU\nCVE-2022-40700 | Montonio for WooCommerce Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T11:51:04.000000Z"}, {"uuid": "ff266cf5-a25f-4bb3-84b2-8085b4fd99b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185444", "content": "https://ift.tt/zMj497X\nCVE-2022-40700 | WooVIP Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:17:08.000000Z"}, {"uuid": "43426ca4-dabe-4410-aeab-71343c1d8dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40700", "type": "seen", "source": "https://t.me/ctinow/185443", "content": "https://ift.tt/2M734O8\nCVE-2022-40700 | WooVirtualWallet Plugin on WordPress server-side request forgery", "creation_timestamp": "2024-02-15T12:17:06.000000Z"}, {"uuid": "1303104c-336d-4dd9-b74b-970c9ee03f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40152", "type": "seen", "source": "https://t.me/ctinow/180537", "content": "https://ift.tt/pkcvxfa\nCVE-2022-40152 | Oracle Commerce Platform 11.3.2 Endeca Integration denial of service", "creation_timestamp": "2024-02-07T06:36:51.000000Z"}, {"uuid": "82d3a84f-9375-4171-b96b-c0883c514489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40702", "type": "seen", "source": "https://t.me/ctinow/182657", "content": "https://ift.tt/sol3JPS\nCVE-2022-40702 | Zorem Advanced Local Pickup for WooCommerce Plugin up to 1.5.2 on WordPress authorization", "creation_timestamp": "2024-02-10T23:16:44.000000Z"}, {"uuid": "ded9548b-c3cf-4be4-8909-6ecc076ec8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40203", "type": "seen", "source": "https://t.me/ctinow/182649", "content": "https://ift.tt/kUfsV9A\nCVE-2022-40203 | AlgolPlus Advanced Dynamic Pricing for WooCommerce Plugin up to 4.1.5 on WordPress authorization", "creation_timestamp": "2024-02-10T22:21:31.000000Z"}, {"uuid": "291cf543-510b-496c-a29c-cc7744412d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40744", "type": "seen", "source": "https://t.me/ctinow/177918", "content": "https://ift.tt/iPylesj\nCVE-2022-40744", "creation_timestamp": "2024-02-02T05:21:32.000000Z"}, {"uuid": "4537576a-91ac-4fe2-bade-6ddc770f4cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40361", "type": "seen", "source": "https://t.me/ctinow/175827", "content": "https://ift.tt/m3JQxcr\nCVE-2022-40361 | Elite CRM 1.2.11 /ngs/login language cross site scripting", "creation_timestamp": "2024-01-30T10:41:24.000000Z"}, {"uuid": "09ec1763-ed1f-4245-a8db-fcde76fd1a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40696", "type": "seen", "source": "https://t.me/ctinow/173786", "content": "https://ift.tt/KEgNcYV\nCVE-2022-40696 | WP Engine Advanced Custom Fields Plugin up to 6.0.2 on WordPress information disclosure", "creation_timestamp": "2024-01-25T20:46:56.000000Z"}, {"uuid": "da22a038-5a37-4774-a0fc-c0d28a589fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40702", "type": "seen", "source": "https://t.me/ctinow/169395", "content": "https://ift.tt/tjYzF2e\nCVE-2022-40702", "creation_timestamp": "2024-01-17T18:26:51.000000Z"}, {"uuid": "d76fb96d-d7f4-4780-8d8b-7daa35b84f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40361", "type": "seen", "source": "https://t.me/ctinow/166295", "content": "https://ift.tt/0YV9LJP\nCVE-2022-40361", "creation_timestamp": "2024-01-11T04:32:07.000000Z"}, {"uuid": "c871bc0a-0a90-4385-bba0-4c8cad381db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40696", "type": "seen", "source": "https://t.me/ctinow/164714", "content": "https://ift.tt/mR3cQFI\nCVE-2022-40696", "creation_timestamp": "2024-01-08T23:27:35.000000Z"}, {"uuid": "aadd9682-34e8-4727-9a3a-65685f850947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40433", "type": "seen", "source": "https://t.me/cibsecurity/69003", "content": "\u203c CVE-2022-40433 \u203c\n\nAn issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:25:04.000000Z"}, {"uuid": "b6f4d9c1-bd00-4e8a-bc7e-1177d2258bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4039", "type": "seen", "source": "https://t.me/cibsecurity/70948", "content": "\u203c CVE-2022-4039 \u203c\n\nA flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T18:31:51.000000Z"}, {"uuid": "60fdc6ab-123e-4a4d-b88d-a5e352650aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40896", "type": "seen", "source": "https://t.me/cibsecurity/67005", "content": "\u203c CVE-2022-40896 \u203c\n\nA ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-19T18:21:47.000000Z"}, {"uuid": "f4bbc2db-3f17-45a4-b93f-e4cdd3fd1c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40609", "type": "seen", "source": "https://t.me/cibsecurity/67592", "content": "\u203c CVE-2022-40609 \u203c\n\nIBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T20:48:00.000000Z"}, {"uuid": "a5e0b06e-d01d-4a7e-9628-cfb72e8a71dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4046", "type": "seen", "source": "https://t.me/cibsecurity/67667", "content": "\u203c CVE-2022-4046 \u203c\n\nIn CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T16:40:08.000000Z"}, {"uuid": "36ae49b8-f93d-4d7b-bbba-052357ba4012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cisoclub/1965", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f WithSecure, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0444\u0435\u0440\u0435 \ud83d\udd10\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcddMicrosoft Office.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83d\udd16\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration Suite (ZCS) \u0443\u0436\u0435 \ud83d\udd11\u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\n3\ufe0f\u20e3 \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-40684, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \ud83d\udd12\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate, \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \ud83d\udccaFortiSwitch Manager. \n\n4\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435\u2755 80 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 vCenter Server \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.0 \u0432\u0441\u0451 \u0435\u0449\u0451 \ud83e\udd37\ud83c\udffc\u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \ud83d\udcc8\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbZoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 macOS \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \ud83d\uddd2\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2022-28762 \u0432 \u041f\u041e.\n\n7\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \ud83c\udf0eChrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u0438 Aruba Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.", "creation_timestamp": "2026-07-30T00:02:58.777517Z"}, {"uuid": "746b84fb-a836-4107-b836-39dab1a06566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4048", "type": "seen", "source": "https://t.me/cibsecurity/64102", "content": "\u203c CVE-2022-4048 \u203c\n\nInadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:50.000000Z"}, {"uuid": "464a5f8e-17ef-433b-a7b6-c97b77d81c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40685", "type": "seen", "source": "https://t.me/cibsecurity/63799", "content": "\u203c CVE-2022-40685 \u203c\n\nInsufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T18:29:01.000000Z"}, {"uuid": "df1fb575-0c74-466c-9952-fca5a4399ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40318", "type": "seen", "source": "https://t.me/cibsecurity/63225", "content": "\u203c CVE-2022-40318 \u203c\n\nAn issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:31:01.000000Z"}, {"uuid": "d32a3ab9-a912-457a-9df6-274a78e76a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40302", "type": "seen", "source": "https://t.me/cibsecurity/63225", "content": "\u203c CVE-2022-40318 \u203c\n\nAn issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:31:01.000000Z"}, {"uuid": "01f5c1f3-c3b3-483b-a5d2-2eb3dac86575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40010", "type": "seen", "source": "https://t.me/cibsecurity/65524", "content": "\u203c CVE-2022-40010 \u203c\n\nTenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:55:08.000000Z"}, {"uuid": "38eb33ef-8f2a-49bf-9ea8-a0e447e16c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40302", "type": "seen", "source": "https://t.me/cibsecurity/63219", "content": "\u203c CVE-2022-40302 \u203c\n\nAn issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:30:55.000000Z"}, {"uuid": "60da62c7-3acb-4cb0-9509-ab8b82839935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40725", "type": "seen", "source": "https://t.me/cibsecurity/62830", "content": "\u203c CVE-2022-40725 \u203c\n\nPingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:14.000000Z"}, {"uuid": "718fc924-c290-455f-8326-688bde360d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40723", "type": "seen", "source": "https://t.me/cibsecurity/62825", "content": "\u203c CVE-2022-40723 \u203c\n\nThe PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:08.000000Z"}, {"uuid": "e8cbfcac-efce-4019-aa65-5cd0012633f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/sysadm_in_up/1380", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nPoC\n\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-07-30T00:03:05.916941Z"}, {"uuid": "f0bb0e16-045a-4745-a302-f3ad85dadfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40946", "type": "seen", "source": "https://t.me/cibsecurity/62255", "content": "\u203c CVE-2022-40946 \u203c\n\nOn D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-16T07:27:24.000000Z"}, {"uuid": "c80fa841-2916-4e83-8d24-5ab667ba6ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40679", "type": "seen", "source": "https://t.me/cibsecurity/61902", "content": "\u203c CVE-2022-40679 \u203c\n\nAn improper neutralization of special elements used in an OS command vulnerability [CWE-78]\u00c2\u00a0in FortiADC 5.x\u00c2\u00a0all versions, 6.0 all versions, 6.1\u00c2\u00a0all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0;\u00c2\u00a0FortiDDoS 4.x\u00c2\u00a0all versions, 5.0\u00c2\u00a0all versions, 5.1\u00c2\u00a0all versions, 5.2\u00c2\u00a0all versions, 5.3\u00c2\u00a0all versions, 5.4\u00c2\u00a0all versions, 5.5\u00c2\u00a0all versions, 5.6\u00c2\u00a0all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T20:23:46.000000Z"}, {"uuid": "2536ce18-8c33-451c-b76a-dc307caaf912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40208", "type": "seen", "source": "https://t.me/cibsecurity/60676", "content": "\u203c CVE-2022-40208 \u203c\n\nIn Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-24T23:42:58.000000Z"}, {"uuid": "8830bebe-65e1-4c56-a699-827f283b4a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4009", "type": "seen", "source": "https://t.me/cibsecurity/60107", "content": "\u203c CVE-2022-4009 \u203c\n\nIn affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T06:30:29.000000Z"}, {"uuid": "efa389bd-9619-43f9-9d1f-d47dc276a9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40633", "type": "seen", "source": "https://t.me/cibsecurity/59352", "content": "\u203c CVE-2022-40633 \u203c\n\nA malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-03T02:49:13.000000Z"}, {"uuid": "ccc50713-9af0-4e28-8894-ab7101bd11ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40699", "type": "seen", "source": "https://t.me/cibsecurity/60114", "content": "\u203c CVE-2022-40699 \u203c\n\nCross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr \u00e2\u20ac\u201c Yet Another Stars Rating plugin <= 3.1.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T11:30:31.000000Z"}, {"uuid": "0873c3d4-83fc-4765-af81-623569fa9ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4007", "type": "seen", "source": "https://t.me/cibsecurity/59710", "content": "\u203c CVE-2022-4007 \u203c\n\nA issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at client side.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-09T02:23:32.000000Z"}, {"uuid": "b9094ce3-fa94-40b9-8bd8-6e08da207f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40676", "type": "seen", "source": "https://t.me/cibsecurity/59591", "content": "\u203c CVE-2022-40676 \u203c\n\nA improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted http requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-07T20:23:28.000000Z"}, {"uuid": "11008304-9eec-4665-b8a4-56ca42817002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40537", "type": "seen", "source": "https://t.me/cibsecurity/59860", "content": "\u203c CVE-2022-40537 \u203c\n\nMemory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:39.000000Z"}, {"uuid": "e517dbb5-3774-4380-b91c-8f0871294d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40527", "type": "seen", "source": "https://t.me/cibsecurity/59838", "content": "\u203c CVE-2022-40527 \u203c\n\nTransient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:33.000000Z"}, {"uuid": "374cf30f-991e-4297-88b0-f6967ebbd96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40530", "type": "seen", "source": "https://t.me/cibsecurity/59831", "content": "\u203c CVE-2022-40530 \u203c\n\nMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:25.000000Z"}, {"uuid": "69eae210-b9cc-42f6-811e-9dfc06037a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40540", "type": "seen", "source": "https://t.me/cibsecurity/59830", "content": "\u203c CVE-2022-40540 \u203c\n\nMemory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:24.000000Z"}, {"uuid": "3735fb89-c3cb-434b-9219-0822adeb6a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40531", "type": "seen", "source": "https://t.me/cibsecurity/59827", "content": "\u203c CVE-2022-40531 \u203c\n\nMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:20.000000Z"}, {"uuid": "6d488bc7-0cda-46ea-8ec9-39994622381c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40692", "type": "seen", "source": "https://t.me/cibsecurity/57425", "content": "\u203c CVE-2022-40692 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:17.000000Z"}, {"uuid": "b47424c8-1bba-45f6-8d67-fbe433e439ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40268", "type": "seen", "source": "https://t.me/cibsecurity/57385", "content": "\u203c CVE-2022-40268 \u203c\n\nImproper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to lead legitimate users to perform unintended operations through clickjacking.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T12:14:51.000000Z"}, {"uuid": "c4118717-cc4f-49dd-ac64-55646225117d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40269", "type": "seen", "source": "https://t.me/cibsecurity/57376", "content": "\u203c CVE-2022-40269 \u203c\n\nAuthentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to disclose sensitive information from users' browsers or spoof legitimate users by abusing inappropriate HTML attributes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T12:14:41.000000Z"}, {"uuid": "cb656086-6480-4011-81f1-c5eece57a1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40198", "type": "seen", "source": "https://t.me/cibsecurity/59224", "content": "\u203c CVE-2022-40198 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet \u00e2\u20ac\u201c For WooCommerce plugin <= 1.3.24 leading to plugin settings change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T16:33:26.000000Z"}, {"uuid": "9caa0b35-4a64-42e9-a164-7742b362d86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4037", "type": "seen", "source": "https://t.me/cibsecurity/56415", "content": "\u203c CVE-2022-4037 \u203c\n\nAn issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeover of third-party accounts when using GitLab as an OAuth provider.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T07:30:08.000000Z"}, {"uuid": "352d7e19-bf80-4b8d-893f-ba470af4806a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40348", "type": "seen", "source": "https://t.me/cibsecurity/58502", "content": "\u203c CVE-2022-40348 \u203c\n\nCross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-18T07:13:44.000000Z"}, {"uuid": "9e95467e-10b9-44c4-9738-945ca5fb8d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40021", "type": "seen", "source": "https://t.me/cibsecurity/58493", "content": "\u203c CVE-2022-40021 \u203c\n\nQVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-18T00:13:52.000000Z"}, {"uuid": "08c2a4ce-2948-459c-a2f9-305934f197b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40232", "type": "seen", "source": "https://t.me/cibsecurity/58461", "content": "\u203c CVE-2022-40232 \u203c\n\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T20:13:36.000000Z"}, {"uuid": "fe00f72d-b9d7-4e42-9782-2a12eb2135a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40347", "type": "seen", "source": "https://t.me/cibsecurity/58432", "content": "\u203c CVE-2022-40347 \u203c\n\nSQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T16:13:09.000000Z"}, {"uuid": "b435877c-7405-4cae-83fd-a9e5cda43c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40032", "type": "seen", "source": "https://t.me/cibsecurity/58431", "content": "\u203c CVE-2022-40032 \u203c\n\nSQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T16:13:08.000000Z"}, {"uuid": "35e2acba-e4d0-4c15-923f-4ca7c4520999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40319", "type": "seen", "source": "https://t.me/cibsecurity/56624", "content": "\u203c CVE-2022-40319 \u203c\n\nThe LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T00:15:27.000000Z"}, {"uuid": "24807c34-f539-4102-9dab-47d13e9ef6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40704", "type": "seen", "source": "https://t.me/cibsecurity/56611", "content": "\u203c CVE-2022-40704 \u203c\n\nA XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T22:15:28.000000Z"}, {"uuid": "3f551860-3870-43ff-8e7a-c17158f1c7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4060", "type": "seen", "source": "https://t.me/cibsecurity/56535", "content": "\u203c CVE-2022-4060 \u203c\n\nThe User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:24:03.000000Z"}, {"uuid": "c9fc2817-8cb0-4158-aec7-f15f1e9e14a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40983", "type": "seen", "source": "https://t.me/cibsecurity/56441", "content": "\u203c CVE-2022-40983 \u203c\n\nAn integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T20:30:23.000000Z"}, {"uuid": "e5e9851e-eb61-4f14-8619-4e7629a4c102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40034", "type": "seen", "source": "https://t.me/cibsecurity/56871", "content": "\u203c CVE-2022-40034 \u203c\n\nCross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-24T00:25:10.000000Z"}, {"uuid": "0ae8a614-748e-40ce-ad69-b5c5bbbe68b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40224", "type": "seen", "source": "https://t.me/cibsecurity/57687", "content": "\u203c CVE-2022-40224 \u203c\n\nA denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T20:45:24.000000Z"}, {"uuid": "8b824fdc-da77-4af8-bfc0-8889eb3b9b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40691", "type": "seen", "source": "https://t.me/cibsecurity/57683", "content": "\u203c CVE-2022-40691 \u203c\n\nAn information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T20:24:03.000000Z"}, {"uuid": "72b96072-093d-4b90-97a3-0841530ffff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40480", "type": "seen", "source": "https://t.me/cibsecurity/57738", "content": "\u203c CVE-2022-40480 \u203c\n\nNordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T02:23:43.000000Z"}, {"uuid": "4ff8df64-9242-4bd5-9374-587a84634cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40693", "type": "seen", "source": "https://t.me/cibsecurity/57681", "content": "\u203c CVE-2022-40693 \u203c\n\nA cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T20:24:00.000000Z"}, {"uuid": "b859936d-7543-4d9f-a340-4c8146000326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40711", "type": "seen", "source": "https://t.me/cibsecurity/55711", "content": "\u203c CVE-2022-40711 \u203c\n\nPrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:15:28.000000Z"}, {"uuid": "665a8daa-d969-4eb7-91a6-8dd75a498518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40985", "type": "seen", "source": "https://t.me/cibsecurity/57018", "content": "\u203c CVE-2022-40985 \u203c\n\nSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the '(ddns1|ddns2) hostname WORD' command template.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T05:16:00.000000Z"}, {"uuid": "edec9555-c962-44ed-a722-7d87f5e08bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40011", "type": "seen", "source": "https://t.me/cibsecurity/55272", "content": "\u203c CVE-2022-40011 \u203c\n\nCross Site Scripting (XSS) vulnerability in typora through 1.38 allows remote attackers to run arbitrary code via export from editor.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-24T02:14:48.000000Z"}, {"uuid": "a7cc0a87-1b22-49ff-901b-04b4f4d34803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4042", "type": "seen", "source": "https://t.me/cibsecurity/55345", "content": "\u203c CVE-2022-4042 \u203c\n\nThe Paytium: Mollie payment forms & donations WordPress plugin through 4.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-26T16:40:41.000000Z"}, {"uuid": "ede825be-04e9-4d61-b88a-f9f8e7f6ab93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40005", "type": "seen", "source": "https://t.me/cibsecurity/55310", "content": "\u203c CVE-2022-40005 \u203c\n\nIntelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:12.000000Z"}, {"uuid": "093664f8-d815-419c-a38f-70a564a068fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40222", "type": "seen", "source": "https://t.me/cibsecurity/56989", "content": "\u203c CVE-2022-40222 \u203c\n\nAn OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:44:01.000000Z"}, {"uuid": "43f3b2c1-6fc1-41d0-bfc1-cbbf4e002820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40899", "type": "seen", "source": "https://t.me/cibsecurity/55219", "content": "\u203c CVE-2022-40899 \u203c\n\nAn issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:14:01.000000Z"}, {"uuid": "375313b3-67af-4efa-8888-8faaa4d5b6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40897", "type": "seen", "source": "https://t.me/cibsecurity/55218", "content": "\u203c CVE-2022-40897 \u203c\n\nAn issue discovered in Python Packaging Authority (PyPA) setuptools 65.3.0 and earlier allows remote attackers to cause a denial of service via crafted HTML package or custom PackageIndex page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:14:00.000000Z"}, {"uuid": "a07cc432-a3fe-4ea7-ba49-b3f9fc1f52be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40962", "type": "seen", "source": "https://t.me/cibsecurity/55189", "content": "\u203c CVE-2022-40962 \u203c\n\nMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 104 and Firefox ESR 102.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:30:08.000000Z"}, {"uuid": "5616d4a4-7f48-465e-a246-b3eaf099d7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40959", "type": "seen", "source": "https://t.me/cibsecurity/55166", "content": "\u203c CVE-2022-40959 \u203c\n\nDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted subdocuments. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:26:59.000000Z"}, {"uuid": "aa8833a6-8867-4658-9b86-253cc5e8853b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40961", "type": "seen", "source": "https://t.me/cibsecurity/55175", "content": "\u203c CVE-2022-40961 \u203c\n\nDuring startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.*This issue only affects Firefox for Android. Other operating systems are not affected.*. This vulnerability affects Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:27:12.000000Z"}, {"uuid": "8df41eea-c2a8-4a57-8528-d9746783bfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40697", "type": "seen", "source": "https://t.me/cibsecurity/56721", "content": "\u203c CVE-2022-40697 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 3com \u00e2\u20ac\u201c Asesor de Cookies para normativa espa\u00c3\u00b1ola plugin <= 3.4.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:09.000000Z"}, {"uuid": "d612fb76-c37b-4d5c-a98d-1f2093046ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4041", "type": "seen", "source": "https://t.me/cibsecurity/57208", "content": "\u203c CVE-2022-4041 \u203c\n\nIncorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T07:37:55.000000Z"}, {"uuid": "6c166570-7028-45a3-b8ff-e9da4283a9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40717", "type": "seen", "source": "https://t.me/cibsecurity/56911", "content": "\u203c CVE-2022-40717 \u203c\n\nThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15727.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-26T20:33:57.000000Z"}, {"uuid": "9760e3fb-b635-482d-87e7-ffb5d7cb5792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40258", "type": "seen", "source": "https://t.me/cibsecurity/57200", "content": "\u203c CVE-2022-40258 \u203c\n\nAMI Megarac Weak password hashes for Redfish & API\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T07:37:46.000000Z"}, {"uuid": "0a52d29f-2e79-4298-9ad0-cb94c05a017b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40036", "type": "seen", "source": "https://t.me/cibsecurity/56959", "content": "\u203c CVE-2022-40036 \u203c\n\nAn issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:38:55.000000Z"}, {"uuid": "f84f7d5c-707c-4720-95c3-ccdc3eb3d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40035", "type": "seen", "source": "https://t.me/cibsecurity/56955", "content": "\u203c CVE-2022-40035 \u203c\n\nFile Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:34:08.000000Z"}, {"uuid": "b3e7eacc-3999-412e-a591-b0f32a8d5a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4054", "type": "seen", "source": "https://t.me/cibsecurity/56954", "content": "\u203c CVE-2022-4054 \u203c\n\nAn issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:34:07.000000Z"}, {"uuid": "3690618e-a6bf-4c54-9199-0785ba55639f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40037", "type": "seen", "source": "https://t.me/cibsecurity/56946", "content": "\u203c CVE-2022-40037 \u203c\n\nAn issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:33:59.000000Z"}, {"uuid": "0e4721ad-9201-494d-87aa-54c368a2be32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40719", "type": "seen", "source": "https://t.me/cibsecurity/56907", "content": "\u203c CVE-2022-40719 \u203c\n\nThis vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd_generic.lua plugin for the xupnpd service, which listens on TCP port 4044 by default. When parsing the feed parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15906.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-26T20:33:53.000000Z"}, {"uuid": "96866915-302d-42bf-812c-3c83cc136699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40201", "type": "seen", "source": "https://t.me/cibsecurity/56079", "content": "\u203c CVE-2022-40201 \u203c\n\nBentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T00:24:32.000000Z"}, {"uuid": "fb72a438-17e2-4348-baa5-4b54bde5557f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4098", "type": "seen", "source": "https://t.me/cibsecurity/54385", "content": "\u203c CVE-2022-4098 \u203c\n\nMultiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. During an authenticated session to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T12:35:30.000000Z"}, {"uuid": "2f175d2a-b125-4513-af8b-07f49d444ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40264", "type": "seen", "source": "https://t.me/cibsecurity/54491", "content": "\u203c CVE-2022-40264 \u203c\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T04:03:27.000000Z"}, {"uuid": "29cc762c-41a6-41f6-8ec1-9d4a6d92c03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4016", "type": "seen", "source": "https://t.me/cibsecurity/54346", "content": "\u203c CVE-2022-4016 \u203c\n\nThe Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, Booster Elite for WooCommerce WordPress plugin before 1.1.8 does not properly check for CSRF when creating and deleting Customer roles, allowing attackers to make logged admins create and delete arbitrary custom roles via CSRF attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-12T20:21:10.000000Z"}, {"uuid": "327ae170-f585-4252-b440-96b68e9b4d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4004", "type": "seen", "source": "https://t.me/cibsecurity/54345", "content": "\u203c CVE-2022-4004 \u203c\n\nThe Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its \"donation_button_twilio_send_test_sms\" AJAX action, which may allow any users with an account on the affected site, like subscribers, to use the plugin's Twilio integration to send SMSes to arbitrary phone numbers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-12T20:21:09.000000Z"}, {"uuid": "02b1ef3e-7e43-4820-8044-fe20a2c25f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40939", "type": "seen", "source": "https://t.me/cibsecurity/54183", "content": "\u203c CVE-2022-40939 \u203c\n\nIn certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:43.000000Z"}, {"uuid": "bb735a07-6207-4bbe-83b5-ad84a24f3939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40966", "type": "seen", "source": "https://t.me/cibsecurity/54112", "content": "\u203c CVE-2022-40966 \u203c\n\nAuthentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WRM-D2133HP firmware Ver. 2.85 and earlier, WRM-D2133HS firmware Ver. 2.96 and earlier, WTR-M2133HP firmware Ver. 2.85 and earlier, WTR-M2133HS firmware Ver. 2.96 and earlier, WXR-1900DHP firmware Ver. 2.50 and earlier, WXR-1900DHP2 firmware Ver. 2.59 and earlier, WXR-1900DHP3 firmware Ver. 2.63 and earlier, WXR-5950AX12 firmware Ver. 3.40 and earlier, WXR-6000AX12B firmware Ver. 3.40 and earlier, WXR-6000AX12S firmware Ver. 3.40 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-1750DHP2 firmware Ver. 2.31 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WEM-1266 firmware Ver. 2.85 and earlier, WEM-1266WP firmware Ver. 2.85 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WXR-1750DHP firmware Ver. 2.60 and earlier, WXR-1750DHP2 firmware Ver. 2.60 and earlier, WZR-1166DHP firmware Ver. 2.18 and earlier, WZR-1166DHP2 firmware Ver. 2.18 and earlier, WZR-1750DHP firmware Ver. 2.30 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-600DHP3 firmware Ver. 2.19 and earlier, WZR-900DHP2 firmware Ver. 2.19 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, WZR-HP-G450H firmware Ver. 1.90 and earlier, WZR-S1750DHP firmware Ver. 2.32 and earlier, WZR-S600DHP firmware Ver. 2.19 and earlier, and WZR-S900DHP firmware Ver. 2.19 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-07T12:22:18.000000Z"}, {"uuid": "fd719c1d-5081-4841-8d3e-29de211f6a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4027", "type": "seen", "source": "https://t.me/cibsecurity/53674", "content": "\u203c CVE-2022-4027 \u203c\n\nThe Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes injecting object and embed tags possible. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages when responding to forum threads that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T00:29:30.000000Z"}, {"uuid": "f808c87b-62a3-48f3-96a0-5fad8231a82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4085", "type": "seen", "source": "https://t.me/cibsecurity/53219", "content": "\u203c CVE-2022-4085 \u203c\n\nA vulnerability was found in Top Infosoft Visitor Details Plugin and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214052.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:22.000000Z"}, {"uuid": "7599db9e-74d2-40fb-ae71-8a158e2d9f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4074", "type": "seen", "source": "https://t.me/cibsecurity/53218", "content": "\u203c CVE-2022-4074 \u203c\n\nA vulnerability, which was classified as problematic, was found in Show IP Address Plugin. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214041 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:21.000000Z"}, {"uuid": "9cea3aae-ec92-4029-933e-bdd86176d85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4078", "type": "seen", "source": "https://t.me/cibsecurity/53217", "content": "\u203c CVE-2022-4078 \u203c\n\nA vulnerability was found in IP Location Block Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214045 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:20.000000Z"}, {"uuid": "82f30de1-bc3d-4aad-9d52-4bc92e1983db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "https://t.me/cibsecurity/55780", "content": "\u203c CVE-2022-4059 \u203c\n\nThe Cryptocurrency Widgets Pack WordPress plugin through 1.8.1 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:29:58.000000Z"}, {"uuid": "95862d47-118f-45fb-9bf7-60f961f2e1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4025", "type": "seen", "source": "https://t.me/cibsecurity/55789", "content": "\u203c CVE-2022-4025 \u203c\n\nInappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:20:39.000000Z"}, {"uuid": "d986bd5b-78d9-4b45-a5f6-be39d51730be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40204", "type": "seen", "source": "https://t.me/cibsecurity/53738", "content": "\u203c CVE-2022-40204 \u203c\n\nA cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T02:30:03.000000Z"}, {"uuid": "8986a318-b86a-479f-bfe2-c817b2a0b97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40304", "type": "seen", "source": "https://t.me/cibsecurity/53444", "content": "\u203c CVE-2022-40304 \u203c\n\nAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T20:13:57.000000Z"}, {"uuid": "991f0144-ed3c-4850-8889-aeffe8a59e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4029", "type": "seen", "source": "https://t.me/cibsecurity/53691", "content": "\u203c CVE-2022-4029 \u203c\n\nThe Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This would be highly complex to exploit as it would require the attacker to set the cookie a cookie for the targeted user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T11:35:47.000000Z"}, {"uuid": "4bf33ea2-cc90-459d-948c-1c02b577f2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4030", "type": "seen", "source": "https://t.me/cibsecurity/53689", "content": "\u203c CVE-2022-4030 \u203c\n\nThe Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as a subscriber, to supply paths to arbitrary files on the server that will subsequently be deleted. This can be used to delete the wp-config.php file that can allow an attacker to configure the site and achieve remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T00:29:48.000000Z"}, {"uuid": "ee6c430d-8835-4a3e-971c-f2c2bdf185d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4033", "type": "seen", "source": "https://t.me/cibsecurity/53675", "content": "\u203c CVE-2022-4033 \u203c\n\nThe Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e. a number, file path, etc..). This makes it possible attackers to submit values other than the intended input type.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T00:29:31.000000Z"}, {"uuid": "e508a26a-7538-4577-b604-0118a8b79a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4057", "type": "seen", "source": "https://t.me/cibsecurity/55773", "content": "\u203c CVE-2022-4057 \u203c\n\nThe Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:29:47.000000Z"}, {"uuid": "ed4a1fa7-4f33-4d99-98b1-d318f67a11fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4099", "type": "seen", "source": "https://t.me/cibsecurity/55762", "content": "\u203c CVE-2022-4099 \u203c\n\nThe Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:17:01.000000Z"}, {"uuid": "a4b3a424-2fb2-41ae-a096-859044ecac2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40266", "type": "seen", "source": "https://t.me/cibsecurity/53476", "content": "\u203c CVE-2022-40266 \u203c\n\nImproper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T12:31:03.000000Z"}, {"uuid": "bb79dc6b-0a74-45c0-9a69-deef5d9b4c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4088", "type": "seen", "source": "https://t.me/cibsecurity/53472", "content": "\u203c CVE-2022-4088 \u203c\n\nA vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214322 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T09:34:30.000000Z"}, {"uuid": "1677b466-5eeb-4812-8e27-049ca3257f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://t.me/cibsecurity/53624", "content": "\u203c CVE-2022-40799 \u203c\n\nData Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T07:28:37.000000Z"}, {"uuid": "23470c85-ab0e-4cab-b376-0ee88d6a415b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40131", "type": "seen", "source": "https://t.me/cibsecurity/52529", "content": "\u203c CVE-2022-40131 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page View Count plugin <= 2.5.5 on WordPress allows an attacker to reset the plugin settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-03T23:25:50.000000Z"}, {"uuid": "0afd8df5-23d1-45f2-91be-2fa562ec93f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/cibsecurity/53717", "content": "\u203c CVE-2022-22984 \u203c\n\nThe package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin before 5.6.5; the package @snyk/snyk-hex-plugin before 1.1.6 are vulnerable to Command Injection due to an incomplete fix for [CVE-2022-40764](https://security.snyk.io/vuln/SNYK-JS-SNYK-3037342). A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the snyk test command on untrusted files. In most cases, an attacker positioned to control the command line arguments to the Snyk CLI would already be positioned to execute arbitrary commands. However, this could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline. This issue has been addressed in the latest Snyk Docker images available at https://hub.docker.com/r/snyk/snyk as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T16:29:12.000000Z"}, {"uuid": "45302636-3708-4ea3-8862-0e6655350271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/cibsecurity/53716", "content": "\u203c CVE-2022-24441 \u203c\n\nThe package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application. This vulnerability may be triggered when running the the CLI tool directly, or when running a scan with one of the IDE plugins that invoke the Snyk CLI. Successful exploitation of this issue would likely require some level of social engineering - to coerce an untrusted project to be downloaded and analyzed via the Snyk CLI or opened in an IDE where a Snyk IDE plugin is installed and enabled. Additionally, if the IDE has a Trust feature then the target folder must be marked as \u00e2\u20ac\u02dctrusted\u00e2\u20ac\u2122 in order to be vulnerable. **NOTE:** This issue is independent of the one reported in [CVE-2022-40764](https://security.snyk.io/vuln/SNYK-JS-SNYK-3037342), and upgrading to a fixed version for this addresses that issue as well. The affected IDE plugins and versions are: - VS Code - Affected: <=1.8.0, Fixed: 1.9.0 - IntelliJ - Affected: <=2.4.47, Fixed: 2.4.48 - Visual Studio - Affected: <=1.1.30, Fixed: 1.1.31 - Eclipse - Affected: <=v20221115.132308, Fixed: All subsequent versions - Language Server - Affected: <=v20221109.114426, Fixed: All subsequent versions\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T16:29:11.000000Z"}, {"uuid": "e57b0411-2ad2-4e47-94e5-8db1b7cb59ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4090", "type": "seen", "source": "https://t.me/cibsecurity/53478", "content": "\u203c CVE-2022-4090 \u203c\n\nA vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unknown processing of the file us_transac.php?action=add. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214331.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T16:19:35.000000Z"}, {"uuid": "7386b852-a919-4ae4-9770-9f91c966e3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40470", "type": "seen", "source": "https://t.me/cibsecurity/53248", "content": "\u203c CVE-2022-40470 \u203c\n\nPhpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-21T18:37:21.000000Z"}, {"uuid": "4cc8765a-6aa4-49ba-af53-644efcb5ded1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40686", "type": "seen", "source": "https://t.me/cibsecurity/53156", "content": "\u203c CVE-2022-40686 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T22:29:25.000000Z"}, {"uuid": "05fe5c02-ddbe-4d2d-805b-6347dc9af17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40265", "type": "seen", "source": "https://t.me/cibsecurity/53702", "content": "\u203c CVE-2022-40265 \u203c\n\nImproper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version \"65\" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version \"65\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T07:29:30.000000Z"}, {"uuid": "9d306b79-58a3-4610-82b6-0bcc1dd6435e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4031", "type": "seen", "source": "https://t.me/cibsecurity/53679", "content": "\u203c CVE-2022-4031 \u203c\n\nThe Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does not properly restrict files to be edited in the context of the plugin. This makes it possible with attackers, with high-level permissions such as an administrator, to supply paths to arbitrary files on the server that can be modified outside of the intended scope of the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T00:29:35.000000Z"}, {"uuid": "994f76e5-a2a4-478b-a511-1d45f97b90bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4032", "type": "seen", "source": "https://t.me/cibsecurity/53677", "content": "\u203c CVE-2022-4032 \u203c\n\nThe Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input sanitization and output escaping that allowed iframe tags to be injected. This makes it possible for unauthenticated attackers to inject iFrames in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T00:29:33.000000Z"}, {"uuid": "fc052fe7-6f67-45bc-ba31-de55a716dd80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40687", "type": "seen", "source": "https://t.me/cibsecurity/53163", "content": "\u203c CVE-2022-40687 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T22:29:35.000000Z"}, {"uuid": "4d08469e-aee9-488d-8bdc-6ccf69d4f788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/cibsecurity/53577", "content": "\u203c CVE-2022-4020 \u203c\n\nVulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T16:28:18.000000Z"}, {"uuid": "b79de27b-ea31-4981-82c7-3979ced73369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4089", "type": "seen", "source": "https://t.me/cibsecurity/53469", "content": "\u203c CVE-2022-4089 \u203c\n\nA vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214324.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T12:24:53.000000Z"}, {"uuid": "eb4c298f-53bf-4759-af57-b162977969a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40977", "type": "seen", "source": "https://t.me/cibsecurity/53474", "content": "\u203c CVE-2022-40977 \u203c\n\nA path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip').\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T12:28:10.000000Z"}, {"uuid": "14db08f8-b005-47ab-971e-4162e7f90456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40771", "type": "seen", "source": "https://t.me/cibsecurity/53450", "content": "\u203c CVE-2022-40771 \u203c\n\nZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T20:14:09.000000Z"}, {"uuid": "30f98043-7581-41e6-bd34-fc3eb47a55d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4091", "type": "seen", "source": "https://t.me/cibsecurity/53491", "content": "\u203c CVE-2022-4091 \u203c\n\nA vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function query of the file food.php. The manipulation of the argument product_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214359.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-25T12:15:09.000000Z"}, {"uuid": "0b7333c8-8a86-4eb2-ac1d-f8767b08843a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40282", "type": "seen", "source": "https://t.me/cibsecurity/53489", "content": "\u203c CVE-2022-40282 \u203c\n\nThe web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is BSECV-2022-21.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-25T07:15:13.000000Z"}, {"uuid": "f0f5f877-9a69-4bc9-a64e-44b832ee41ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40976", "type": "seen", "source": "https://t.me/cibsecurity/53473", "content": "\u203c CVE-2022-40976 \u203c\n\nA path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip').\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T12:28:08.000000Z"}, {"uuid": "2a401eda-b99a-4358-af86-36aacf6453c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40189", "type": "seen", "source": "https://t.me/cibsecurity/53316", "content": "\u203c CVE-2022-40189 \u203c\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Pig Provider is installed (Pig Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pig Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T12:12:45.000000Z"}, {"uuid": "3533af1d-4855-4c9f-9a11-df3dd26f00b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40954", "type": "seen", "source": "https://t.me/cibsecurity/53317", "content": "\u203c CVE-2022-40954 \u203c\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T12:12:46.000000Z"}, {"uuid": "8731e10a-737b-49da-8f74-27e158dc40d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40772", "type": "seen", "source": "https://t.me/cibsecurity/53443", "content": "\u203c CVE-2022-40772 \u203c\n\nZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T20:13:56.000000Z"}, {"uuid": "1a398037-3d7b-4dd8-ac98-da6a0d9a9c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4087", "type": "seen", "source": "https://t.me/cibsecurity/53232", "content": "\u203c CVE-2022-4087 \u203c\n\nA vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad_len leads to information exposure through discrepancy. The name of the patch is 186306d6199096b7a7c4b4574d4be8cdb8426729. It is recommended to apply a patch to fix this issue. VDB-214054 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T09:16:32.000000Z"}, {"uuid": "71468b7b-98df-4072-8ee9-3623b4da1be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4093", "type": "seen", "source": "https://t.me/cibsecurity/53231", "content": "\u203c CVE-2022-4093 \u203c\n\nSQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-21T08:25:32.000000Z"}, {"uuid": "22794440-1f02-4586-89a8-9c3f5fdc3729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4082", "type": "seen", "source": "https://t.me/cibsecurity/53229", "content": "\u203c CVE-2022-4082 \u203c\n\nA vulnerability, which was classified as problematic, has been found in Solwin Infotech User Activity Log Plugin. This issue affects some unknown processing of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214049 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T19:44:39.000000Z"}, {"uuid": "f6c65909-0901-4ee5-bfab-5e6534926904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4075", "type": "seen", "source": "https://t.me/cibsecurity/53228", "content": "\u203c CVE-2022-4075 \u203c\n\nA vulnerability has been found in Banhammer Plugin and classified as problematic. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214042 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:31.000000Z"}, {"uuid": "af6b0235-a29b-4e96-83a8-82ec19f0b3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4081", "type": "seen", "source": "https://t.me/cibsecurity/53227", "content": "\u203c CVE-2022-4081 \u203c\n\nA vulnerability classified as problematic was found in getseofix Show Visitor IP Address Widget and Shortcode Plugin. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214048.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:30.000000Z"}, {"uuid": "b67f2601-faec-4875-b801-c22341f0cbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4073", "type": "seen", "source": "https://t.me/cibsecurity/53226", "content": "\u203c CVE-2022-4073 \u203c\n\nA vulnerability, which was classified as problematic, has been found in Aleksandr R alx ip statistic Plugin. Affected by this issue is some unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214040.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:29.000000Z"}, {"uuid": "5f877f58-7e45-42ee-97e1-bbe0750e20de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4044", "type": "seen", "source": "https://t.me/cibsecurity/53410", "content": "\u203c CVE-2022-4044 \u203c\n\nA denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T12:13:44.000000Z"}, {"uuid": "4e4d4b26-cffd-44e9-a2ac-1e7432ffbe38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4019", "type": "seen", "source": "https://t.me/cibsecurity/53408", "content": "\u203c CVE-2022-4019 \u203c\n\nA denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T12:13:39.000000Z"}, {"uuid": "90c7ed33-8f77-43ff-b515-0ed6fe66787c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4045", "type": "seen", "source": "https://t.me/cibsecurity/53407", "content": "\u203c CVE-2022-4045 \u203c\n\nA denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T12:13:38.000000Z"}, {"uuid": "fb241936-62d1-47a5-9051-2ef7a8c975b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40770", "type": "seen", "source": "https://t.me/cibsecurity/53397", "content": "\u203c CVE-2022-40770 \u203c\n\nZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-23T07:13:48.000000Z"}, {"uuid": "bf3f8c61-0a49-42ee-9930-c09806b5c22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40228", "type": "seen", "source": "https://t.me/cibsecurity/53370", "content": "\u203c CVE-2022-40228 \u203c\n\nIBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T22:13:12.000000Z"}, {"uuid": "098d98c4-9a55-4dcd-b778-de617ab405bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/cibsecurity/53250", "content": "\u203c CVE-2022-4096 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-21T18:37:23.000000Z"}, {"uuid": "6c03bbee-f6e6-4cdf-9757-a10c7e0d56c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4071", "type": "seen", "source": "https://t.me/cibsecurity/53225", "content": "\u203c CVE-2022-4071 \u203c\n\nA vulnerability classified as problematic has been found in RSJoomla RSFirewall Plugin. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214038 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:28.000000Z"}, {"uuid": "c5f7e622-2f20-4efc-9bd7-5dc120061fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40842", "type": "seen", "source": "https://t.me/cibsecurity/53308", "content": "\u203c CVE-2022-40842 \u203c\n\nndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T07:12:55.000000Z"}, {"uuid": "3c2f17cf-ac7e-4822-83f6-ea40e2a3dcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40129", "type": "seen", "source": "https://t.me/cibsecurity/53245", "content": "\u203c CVE-2022-40129 \u203c\n\nA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-21T18:37:16.000000Z"}, {"uuid": "52077ae3-3e1b-478c-8a65-41812246d570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40257", "type": "seen", "source": "https://t.me/cibsecurity/51071", "content": "\u203c CVE-2022-40257 \u203c\n\nAn HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a crafted email with HTML content in the Subject field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T00:25:13.000000Z"}, {"uuid": "37eca4da-3cf6-43fb-a933-b60275a91633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4080", "type": "seen", "source": "https://t.me/cibsecurity/53222", "content": "\u203c CVE-2022-4080 \u203c\n\nA vulnerability classified as problematic has been found in Opal Login History Plugin. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214047.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:26.000000Z"}, {"uuid": "17c9e721-a681-4916-b961-04568587a00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40602", "type": "seen", "source": "https://t.me/cibsecurity/53312", "content": "\u203c CVE-2022-40602 \u203c\n\nA flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T07:12:59.000000Z"}, {"uuid": "c78eba23-388a-4827-918e-aff5dff1867e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cibsecurity/53298", "content": "\u203c CVE-2022-40765 \u203c\n\nA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T07:12:40.000000Z"}, {"uuid": "04dcd251-f455-4671-9b01-eed0fa91797e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40746", "type": "seen", "source": "https://t.me/cibsecurity/53273", "content": "\u203c CVE-2022-40746 \u203c\n\nIBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-21T20:37:27.000000Z"}, {"uuid": "c9555349-b8a4-4595-aebe-75d8ad26b64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4077", "type": "seen", "source": "https://t.me/cibsecurity/53221", "content": "\u203c CVE-2022-4077 \u203c\n\nA vulnerability was found in Yellow Tree Geolocation IP Detection Plugin. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214044.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:24.000000Z"}, {"uuid": "79dfc881-78fb-4661-aab8-3b90250f1911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4076", "type": "seen", "source": "https://t.me/cibsecurity/53220", "content": "\u203c CVE-2022-4076 \u203c\n\nA vulnerability was found in codeboxr CBX User Online & Last Login Plugin and classified as problematic. This issue affects some unknown processing of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214043.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:23.000000Z"}, {"uuid": "cb464ead-346e-43f7-938e-b06ef2a06589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "seen", "source": "https://t.me/cibsecurity/53205", "content": "\u203c CVE-2022-4064 \u203c\n\nA vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to apply a patch to fix this issue. VDB-214026 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T06:15:31.000000Z"}, {"uuid": "a734856c-963f-457c-b3ca-3253e8a711c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4065", "type": "seen", "source": "https://t.me/cibsecurity/53204", "content": "\u203c CVE-2022-4065 \u203c\n\nA vulnerability was found in cbeust testng. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-214027.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-19T22:30:25.000000Z"}, {"uuid": "6b49c84c-c64f-42ed-9fdf-75b2ffa90580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4066", "type": "seen", "source": "https://t.me/cibsecurity/53203", "content": "\u203c CVE-2022-4066 \u203c\n\nA vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-19T22:30:24.000000Z"}, {"uuid": "48d03d1c-de3e-488a-81fe-68c78921cc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40886", "type": "seen", "source": "https://t.me/cibsecurity/53114", "content": "\u203c CVE-2022-43192 \u203c\n\nAn arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T00:18:06.000000Z"}, {"uuid": "a5968640-6ffd-4c88-ad50-fd36e057bdd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4083", "type": "seen", "source": "https://t.me/cibsecurity/53224", "content": "\u203c CVE-2022-4083 \u203c\n\nA vulnerability, which was classified as problematic, was found in MyTechTalky User Location and IP Plugin. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214050 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:28.000000Z"}, {"uuid": "0e7d6702-8c12-45db-b010-889f5e1e22fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4079", "type": "seen", "source": "https://t.me/cibsecurity/53223", "content": "\u203c CVE-2022-4079 \u203c\n\nA vulnerability was found in Show Visitor IP Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214046 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:27.000000Z"}, {"uuid": "12453028-ee48-49bb-867f-7d71e2620547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4070", "type": "seen", "source": "https://t.me/cibsecurity/53210", "content": "\u203c CVE-2022-4070 \u203c\n\nInsufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T07:30:56.000000Z"}, {"uuid": "74b0baa5-43d9-419f-9552-5f52ea56d966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4069", "type": "seen", "source": "https://t.me/cibsecurity/53209", "content": "\u203c CVE-2022-4069 \u203c\n\nCross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T07:30:55.000000Z"}, {"uuid": "336922d5-e880-4682-b2ae-c1051091a9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4067", "type": "seen", "source": "https://t.me/cibsecurity/53207", "content": "\u203c CVE-2022-4067 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T07:30:53.000000Z"}, {"uuid": "a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4086", "type": "seen", "source": "https://t.me/cibsecurity/53216", "content": "\u203c CVE-2022-4086 \u203c\n\nA vulnerability was found in WP White Security WP Activity Log Plugin. It has been classified as problematic. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214053 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:19.000000Z"}, {"uuid": "0c293be1-612b-4856-b0dd-ae5a64654c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4084", "type": "seen", "source": "https://t.me/cibsecurity/53215", "content": "\u203c CVE-2022-4084 \u203c\n\nA vulnerability has been found in Activity Log Plugin and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214051.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:18.000000Z"}, {"uuid": "6861e4d5-080e-48bc-9da2-247434b6ec72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4072", "type": "seen", "source": "https://t.me/cibsecurity/53214", "content": "\u203c CVE-2022-4072 \u203c\n\nA vulnerability classified as problematic was found in Iridium Intelligence bad_ip WP Plugin. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214039.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:17.000000Z"}, {"uuid": "53772900-e2ec-43f0-8247-9611cf706db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4068", "type": "seen", "source": "https://t.me/cibsecurity/53211", "content": "\u203c CVE-2022-4068 \u203c\n\nA user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T07:31:00.000000Z"}, {"uuid": "20a31e1e-4b44-448f-91e6-a38c8832e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40841", "type": "seen", "source": "https://t.me/cibsecurity/55059", "content": "\u203c CVE-2022-40841 \u203c\n\nA cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the \"htmlNodes\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T20:12:49.000000Z"}, {"uuid": "fa117fc7-c3f8-43ae-94f4-6a0e6d486589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40145", "type": "seen", "source": "https://t.me/cibsecurity/55054", "content": "\u203c CVE-2022-40145 \u203c\n\nThis vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL. The function jaas.modules.src.main.java.porg.apache.karaf.jass.modules.jdbc.JDBCUtils#doCreateDatasource use InitialContext.lookup(jndiName) without filtering. An user can modify `options.put(JDBCUtils.DATASOURCE, \"osgi:\" + DataSource.class.getName());` to `options.put(JDBCUtils.DATASOURCE,\"jndi:rmi://x.x.x.x:xxxx/Command\");` in JdbcLoginModuleTest#setup. This is vulnerable to a remote code execution (RCE) attack when a configuration uses a JNDI LDAP data source URI when an attacker has control of the target LDAP server.This issue affects all versions of Apache Karaf up to 4.4.1 and 4.3.7. We encourage the users to upgrade to Apache Karaf at least 4.4.2 or 4.3.8\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T05:38:07.000000Z"}, {"uuid": "99ea5f10-5c3c-4765-943d-c277a4f5f370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40698", "type": "seen", "source": "https://t.me/cibsecurity/53196", "content": "\u203c CVE-2022-40698 \u203c\n\nAuth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-19T02:43:42.000000Z"}, {"uuid": "704bc28a-06c6-4eb1-b9ec-cbeff48c9fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4055", "type": "seen", "source": "https://t.me/cibsecurity/53195", "content": "\u203c CVE-2022-4055 \u203c\n\nWhen xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-19T02:40:42.000000Z"}, {"uuid": "f0113fd8-065f-4c80-ae92-1e28623a0777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40956", "type": "seen", "source": "https://t.me/cibsecurity/55140", "content": "\u203c CVE-2022-40956 \u203c\n\nWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:20:08.000000Z"}, {"uuid": "8ba094e4-7cc5-4157-8ff0-7a8c23804ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40751", "type": "seen", "source": "https://t.me/cibsecurity/53084", "content": "\u203c CVE-2022-40751 \u203c\n\nIBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including \"Manage Security\" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:18:09.000000Z"}, {"uuid": "60813fb2-36fb-40e6-a44a-133dae75800f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4053", "type": "seen", "source": "https://t.me/cibsecurity/53078", "content": "\u203c CVE-2022-4053 \u203c\n\nA vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:18:00.000000Z"}, {"uuid": "0884fac1-1dd1-4da3-96e6-41ea2c2cabe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4051", "type": "seen", "source": "https://t.me/cibsecurity/53071", "content": "\u203c CVE-2022-4051 \u203c\n\nA vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:17:48.000000Z"}, {"uuid": "a36921fe-190f-42a0-99e0-0571a57854df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4052", "type": "seen", "source": "https://t.me/cibsecurity/53067", "content": "\u203c CVE-2022-4052 \u203c\n\nA vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:17:44.000000Z"}, {"uuid": "97341b2d-9f81-4638-a88f-656a2c8e2fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4022", "type": "seen", "source": "https://t.me/cibsecurity/53060", "content": "\u203c CVE-2022-4022 \u203c\n\nThe SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While version 2.5 adds the ability to sanitize image as they are uploaded, the plugin defaults to disable sanitization and does not restrict SVG upload to only administrators. This allows authenticated attackers, with author-level privileges and higher, to upload malicious SVG files that can be embedded in posts and pages by higher privileged users. Additionally, the embedded JavaScript is also triggered on visiting the image URL, which allows an attacker to execute malicious code in browsers visiting that URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T16:02:00.000000Z"}, {"uuid": "8886346d-623d-4d97-9c79-6791fb3b4dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4013", "type": "seen", "source": "https://t.me/cibsecurity/53038", "content": "\u203c CVE-2022-4013 \u203c\n\nA vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213787.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T15:52:54.000000Z"}, {"uuid": "e0a08069-66c9-43e9-be31-acfeda944dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4011", "type": "seen", "source": "https://t.me/cibsecurity/53037", "content": "\u203c CVE-2022-4011 \u203c\n\nA vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213785 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T15:52:53.000000Z"}, {"uuid": "059e2fda-ed1a-4447-a533-31178e1a3b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4058", "type": "seen", "source": "https://t.me/cibsecurity/54871", "content": "\u203c CVE-2022-4058 \u203c\n\nThe Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T16:10:46.000000Z"}, {"uuid": "d3ef9594-8515-4630-b7cb-85d7308c2e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40957", "type": "seen", "source": "https://t.me/cibsecurity/55136", "content": "\u203c CVE-2022-40957 \u203c\n\nInconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.*This bug only affects Firefox on ARM64 platforms.*. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:20:04.000000Z"}, {"uuid": "09c257c5-212d-4cfe-8633-162a88aeb5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40958", "type": "seen", "source": "https://t.me/cibsecurity/55134", "content": "\u203c CVE-2022-40958 \u203c\n\nBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus overwrite cookies from a secure context, leading to session fixation and other attacks. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:20:02.000000Z"}, {"uuid": "016a37d0-2a44-45e1-a4b8-f07aeaf54d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40607", "type": "seen", "source": "https://t.me/cibsecurity/54898", "content": "\u203c CVE-2022-40607 \u203c\n\nIBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T22:21:54.000000Z"}, {"uuid": "1407e910-39d0-4e10-adf8-e6170f4b51fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40128", "type": "seen", "source": "https://t.me/cibsecurity/52679", "content": "\u203c CVE-2022-40128 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-08T22:35:46.000000Z"}, {"uuid": "2f7df5ce-0495-42cc-87d4-f9be99b1f94f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40632", "type": "seen", "source": "https://t.me/cibsecurity/52677", "content": "\u203c CVE-2022-40632 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-08T22:35:41.000000Z"}, {"uuid": "4610baef-f061-444e-885a-a13ac1f60a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40206", "type": "seen", "source": "https://t.me/cibsecurity/52668", "content": "\u203c CVE-2022-40206 \u203c\n\nInsecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-08T22:35:30.000000Z"}, {"uuid": "aec0ad5f-e45a-4870-96bf-0147b71983a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40205", "type": "seen", "source": "https://t.me/cibsecurity/52662", "content": "\u203c CVE-2022-40205 \u203c\n\nInsecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-08T22:35:21.000000Z"}, {"uuid": "0e1e5ee0-660e-4567-9cea-9d577db78454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40434", "type": "seen", "source": "https://t.me/cibsecurity/54932", "content": "\u203c CVE-2022-40434 \u203c\n\nSoftr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T00:10:44.000000Z"}, {"uuid": "e39e1190-40e7-4408-bb91-d46f827741b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40291", "type": "seen", "source": "https://t.me/cibsecurity/52328", "content": "\u203c CVE-2022-40291 \u203c\n\nThe application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:38.000000Z"}, {"uuid": "7e65c7be-a56e-4606-950b-f8af1bde7730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4061", "type": "seen", "source": "https://t.me/cibsecurity/54863", "content": "\u203c CVE-2022-4061 \u203c\n\nThe JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T16:10:37.000000Z"}, {"uuid": "8282b040-aba6-479f-ac42-5b022870c45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40743", "type": "seen", "source": "https://t.me/cibsecurity/54848", "content": "\u203c CVE-2022-40743 \u203c\n\nImproper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0.0 to 9.1.3. Users should upgrade to 9.1.4 or later versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T14:25:34.000000Z"}, {"uuid": "cd054448-257a-4e56-bfee-f0a0013961da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "https://t.me/cibsecurity/54857", "content": "\u203c CVE-2022-4063 \u203c\n\nThe InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T16:10:30.000000Z"}, {"uuid": "18a233c0-edec-40c2-9d36-ca67566ccbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "seen", "source": "https://t.me/cibsecurity/54856", "content": "\u203c CVE-2022-4050 \u203c\n\nThe JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T16:10:30.000000Z"}, {"uuid": "eafbed2a-8060-48cd-9d90-b04f9161d70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4024", "type": "seen", "source": "https://t.me/cibsecurity/54853", "content": "\u203c CVE-2022-4024 \u203c\n\nThe Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T16:10:26.000000Z"}, {"uuid": "512ea03e-7984-4e16-ae44-dc089c5ebc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40290", "type": "seen", "source": "https://t.me/cibsecurity/52322", "content": "\u203c CVE-2022-40290 \u203c\n\nThe application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:29.000000Z"}, {"uuid": "01668756-d00c-4809-811b-ea7639765f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40223", "type": "seen", "source": "https://t.me/cibsecurity/52664", "content": "\u203c CVE-2022-40223 \u203c\n\nNonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-08T23:18:38.000000Z"}, {"uuid": "e3788a62-383c-442f-a4e3-1af59cac3cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40190", "type": "seen", "source": "https://t.me/cibsecurity/52325", "content": "\u203c CVE-2022-40190 \u203c\n\nSAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users\u00e2\u20ac\u2122 browsers and steal sensitive information, including user credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:35.000000Z"}, {"uuid": "2c8f4193-3f40-48eb-b2a5-d274ce41e8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40294", "type": "seen", "source": "https://t.me/cibsecurity/52319", "content": "\u203c CVE-2022-40294 \u203c\n\nThe application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:23.000000Z"}, {"uuid": "d1255566-e944-40a5-a213-c3b99abe7501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40287", "type": "seen", "source": "https://t.me/cibsecurity/52318", "content": "\u203c CVE-2022-40287 \u203c\n\nThe application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:22.000000Z"}, {"uuid": "4d71e61c-00bd-4eae-855c-7a997ffa08fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://t.me/cibsecurity/52308", "content": "\u203c CVE-2022-40471 \u203c\n\nRemote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T19:39:59.000000Z"}, {"uuid": "6d000500-71bf-41b2-bdf5-33e861772f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40284", "type": "seen", "source": "https://t.me/cibsecurity/52579", "content": "\u203c CVE-2022-40284 \u203c\n\nA buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-07T02:33:46.000000Z"}, {"uuid": "6e36b596-e97a-4ccd-ba14-067ad0c2c9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40885", "type": "seen", "source": "https://t.me/cibsecurity/51830", "content": "\u203c CVE-2022-40885 \u203c\n\nBento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-19T22:15:43.000000Z"}, {"uuid": "7bc4cda1-1903-4f0e-8da1-49dbc1949787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40276", "type": "seen", "source": "https://t.me/cibsecurity/52531", "content": "\u203c CVE-2022-40276 \u203c\n\nZettlr version 2.3.0 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr. This is possible because the application does not have a CSP policy (or at least not strict enough) and/or does not properly validate the contents of markdown files before rendering them.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-03T23:25:53.000000Z"}, {"uuid": "a04a2ea9-f9dd-4692-ac2f-35f99f47660d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40968", "type": "seen", "source": "https://t.me/cibsecurity/53964", "content": "\u203c CVE-2022-40968 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-05T02:39:13.000000Z"}, {"uuid": "0e8479ef-55ec-40ea-a273-13c510f2c96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40839", "type": "seen", "source": "https://t.me/cibsecurity/52399", "content": "\u203c CVE-2022-40839 \u203c\n\nA SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-01T19:13:59.000000Z"}, {"uuid": "a8259a44-aad4-4d84-803c-6f632d7e0cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40288", "type": "seen", "source": "https://t.me/cibsecurity/52313", "content": "\u203c CVE-2022-40288 \u203c\n\nThe application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, which could be leveraged to escalate privileges within and compromise any account that views their user profile.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:15.000000Z"}, {"uuid": "c5c434c7-b4c3-4f0b-94d8-34cf098461cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40293", "type": "seen", "source": "https://t.me/cibsecurity/52311", "content": "\u203c CVE-2022-40293 \u203c\n\nThe application was vulnerable to a session fixation that could be used hijack accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-31T23:13:13.000000Z"}, {"uuid": "ed5a269e-1415-437a-908f-010ccdccbd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40703", "type": "seen", "source": "https://t.me/cibsecurity/52120", "content": "\u203c CVE-2022-40703 \u203c\n\nCWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-27T01:14:37.000000Z"}, {"uuid": "cc041d55-27b7-4d81-8853-76096ce3d33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40965", "type": "seen", "source": "https://t.me/cibsecurity/52183", "content": "\u203c CVE-2022-40965 \u203c\n\nThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:28:58.000000Z"}, {"uuid": "94d7d799-9f07-46e0-955c-269b74a2b7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40876", "type": "seen", "source": "https://t.me/cibsecurity/52181", "content": "\u203c CVE-2022-40876 \u203c\n\nIn Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:28:56.000000Z"}, {"uuid": "2e724713-0686-43aa-80f8-8ec2017bd6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/cibsecurity/54039", "content": "\u203c CVE-2022-40259 \u203c\n\nAMI MegaRAC Redfish Arbitrary Code Execution\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T00:40:32.000000Z"}, {"uuid": "584dd9e7-88c9-447b-a3c1-11d45e91046e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40967", "type": "seen", "source": "https://t.me/cibsecurity/52186", "content": "\u203c CVE-2022-40967 \u203c\n\nThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:29:03.000000Z"}, {"uuid": "d4282f0e-0f41-443b-97a4-f1af2b729c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40183", "type": "seen", "source": "https://t.me/cibsecurity/52167", "content": "\u203c CVE-2022-40183 \u203c\n\nAn error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-27T20:33:37.000000Z"}, {"uuid": "8166cbf1-d77f-4f5f-a24e-12f41491e660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40184", "type": "seen", "source": "https://t.me/cibsecurity/52162", "content": "\u203c CVE-2022-40184 \u203c\n\nIncomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-27T20:33:30.000000Z"}, {"uuid": "959a5944-43ff-42e7-b0db-9597ea6fc08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40756", "type": "seen", "source": "https://t.me/cibsecurity/50801", "content": "\u203c CVE-2022-40756 \u203c\n\nIf folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:32.000000Z"}, {"uuid": "70f1296f-2c47-402c-9ac4-78266ab236b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40489", "type": "seen", "source": "https://t.me/cibsecurity/53752", "content": "\u203c CVE-2022-40489 \u203c\n\nThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T07:30:42.000000Z"}, {"uuid": "bf69cdb8-c5f3-4360-9811-6b3f19925906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40849", "type": "seen", "source": "https://t.me/cibsecurity/53751", "content": "\u203c CVE-2022-40849 \u203c\n\nThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T07:30:41.000000Z"}, {"uuid": "32736677-18ab-4d97-99f6-0bfa9ee06244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40690", "type": "seen", "source": "https://t.me/cibsecurity/51989", "content": "\u203c CVE-2022-40690 \u203c\n\nCross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-24T18:26:04.000000Z"}, {"uuid": "164f050c-1947-4506-9a89-f104d0a5b0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40680", "type": "seen", "source": "https://t.me/cibsecurity/54078", "content": "\u203c CVE-2022-40680 \u203c\n\nA improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a privileged attacker to execute unauthorized code or commands via storing malicious payloads in replacement messages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T20:40:57.000000Z"}, {"uuid": "8965d78c-707f-4eb6-ad17-5b1218d794b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40209", "type": "seen", "source": "https://t.me/cibsecurity/54062", "content": "\u203c CVE-2022-40209 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T18:41:10.000000Z"}, {"uuid": "4746899a-dc22-4f00-98cd-3f688f8b755d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40603", "type": "seen", "source": "https://t.me/cibsecurity/54045", "content": "\u203c CVE-2022-40603 \u203c\n\nA cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim\u00e2\u20ac\u2122s browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T10:12:34.000000Z"}, {"uuid": "7218dc10-8820-4160-8cdc-4bb038bc0050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40103", "type": "seen", "source": "https://t.me/cibsecurity/50369", "content": "\u203c CVE-2022-40103 \u203c\n\nTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:13:42.000000Z"}, {"uuid": "c1db7bc2-dd61-419b-a3ea-8171d1319c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cibsecurity/51678", "content": "\u203c CVE-2022-40684 \u203c\n\nAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T18:14:22.000000Z"}, {"uuid": "79da1eac-5b87-4593-b308-ec63a454126b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40606", "type": "seen", "source": "https://t.me/cibsecurity/51642", "content": "\u203c CVE-2022-40606 \u203c\n\nMITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T17:39:13.000000Z"}, {"uuid": "35b0789a-153e-4768-8b4c-f9590f5a338e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40605", "type": "seen", "source": "https://t.me/cibsecurity/51642", "content": "\u203c CVE-2022-40606 \u203c\n\nMITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T17:39:13.000000Z"}, {"uuid": "6b2f7060-090d-4b08-89bc-399d7d1c482f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40226", "type": "seen", "source": "https://t.me/cibsecurity/51103", "content": "\u203c CVE-2022-40226 \u203c\n\nA vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:52.000000Z"}, {"uuid": "f34d8f37-192d-4249-bbdc-302741053180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40055", "type": "seen", "source": "https://t.me/cibsecurity/51621", "content": "\u203c CVE-2022-40055 \u203c\n\nAn issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-17T22:13:18.000000Z"}, {"uuid": "07bf1cd3-b7f3-457d-8811-f97d14d32bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40315", "type": "seen", "source": "https://t.me/cibsecurity/50788", "content": "\u203c CVE-2022-40315 \u203c\n\nA limited SQL injection risk was identified in the \"browse list of users\" site administration page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:27.000000Z"}, {"uuid": "a68a48ff-fab7-4385-bd67-188671670684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40707", "type": "seen", "source": "https://t.me/cibsecurity/50639", "content": "\u203c CVE-2022-40709 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707 and 40708.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:47.000000Z"}, {"uuid": "bafa09d6-0440-4137-8aa8-883d99a55d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40710", "type": "seen", "source": "https://t.me/cibsecurity/50627", "content": "\u203c CVE-2022-40710 \u203c\n\nA link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:31.000000Z"}, {"uuid": "51aa88de-5fd7-45df-88d4-40affb9f4acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/reverseame/2880", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096) https://infosecwriteups.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2", "creation_timestamp": "2026-07-30T01:01:51.851182Z"}, {"uuid": "af309f48-5816-45e8-9f4a-3c544ce70ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40929", "type": "seen", "source": "https://t.me/cibsecurity/50614", "content": "\u203c CVE-2022-40929 \u203c\n\nXXL-JOB 2.2.0 has a Command execution vulnerability in background tasks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T22:34:19.000000Z"}, {"uuid": "f4c1bc86-0b53-4e85-ab66-829412751b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40047", "type": "seen", "source": "https://t.me/cibsecurity/51155", "content": "\u203c CVE-2022-40047 \u203c\n\nFlatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T22:26:20.000000Z"}, {"uuid": "b62a7244-f4cf-4668-a5ce-2743b55a3ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40187", "type": "seen", "source": "https://t.me/cibsecurity/51301", "content": "\u203c CVE-2022-40187 \u203c\n\nForesight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-13T07:27:20.000000Z"}, {"uuid": "98fa823a-be10-45d3-b301-16f72554df49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40871", "type": "seen", "source": "https://t.me/cibsecurity/51262", "content": "\u203c CVE-2022-40871 \u203c\n\nDolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-12T16:26:42.000000Z"}, {"uuid": "11a5801c-d12c-4fe1-bb5a-cff4d28adb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "seen", "source": "https://t.me/cibsecurity/51254", "content": "\u203c CVE-2022-40664 \u203c\n\nApache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-12T12:37:45.000000Z"}, {"uuid": "24f60430-5fc5-4cf9-9009-358847c5c90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40180", "type": "seen", "source": "https://t.me/cibsecurity/51110", "content": "\u203c CVE-2022-40180 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). A Cross-Site Request Forgery exists in the \u00e2\u20ac\u0153Import Files\u00e2\u20ac\u0153 functionality of the \u00e2\u20ac\u0153Operation\u00e2\u20ac\ufffd web application due to the missing validation of anti-CSRF tokens or other origin checks. A remote unauthenticated attacker can upload and enable permanent arbitrary JavaScript code into the device just by convincing a victim to visit a specifically crafted webpage while logged-in to the device web application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:26:03.000000Z"}, {"uuid": "df888f77-c342-40bc-92a4-37f6f5c168c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40834", "type": "seen", "source": "https://t.me/cibsecurity/50963", "content": "\u203c CVE-2022-40834 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_not_like() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:25.000000Z"}, {"uuid": "94cecbae-30dc-45e9-9cfb-8f8bdb0d7eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40827", "type": "seen", "source": "https://t.me/cibsecurity/50962", "content": "\u203c CVE-2022-40827 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php where() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:23.000000Z"}, {"uuid": "77dc0212-c160-4370-adcd-537ed9dfba34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40825", "type": "seen", "source": "https://t.me/cibsecurity/50961", "content": "\u203c CVE-2022-40825 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php where_in() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:22.000000Z"}, {"uuid": "4b26adbd-3f3e-4fc7-9386-e946802a1446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40750", "type": "seen", "source": "https://t.me/cibsecurity/52937", "content": "\u203c CVE-2022-40750 \u203c\n\nIBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:55:09.000000Z"}, {"uuid": "e00a2548-6f6c-44ea-b312-ba7a3a8daed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40835", "type": "seen", "source": "https://t.me/cibsecurity/50957", "content": "\u203c CVE-2022-40835 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:16.000000Z"}, {"uuid": "9e0b9d60-0901-4b35-b2f8-a79fe24958fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40829", "type": "seen", "source": "https://t.me/cibsecurity/50956", "content": "\u203c CVE-2022-40829 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_like() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:14.000000Z"}, {"uuid": "0a1e5617-e970-4402-843f-15b28b484209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40147", "type": "seen", "source": "https://t.me/cibsecurity/51109", "content": "\u203c CVE-2022-40147 \u203c\n\nA vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:59.000000Z"}, {"uuid": "a86c2abd-5d35-44e4-a8a5-1e9d3af702dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40179", "type": "seen", "source": "https://t.me/cibsecurity/51108", "content": "\u203c CVE-2022-40179 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). A Cross-Site Request Forgery exists in endpoints of the \u00e2\u20ac\u0153Operation\u00e2\u20ac\ufffd web application that interpret and execute Axon language queries, due to the missing validation of anti-CSRF tokens or other origin checks. By convincing a victim to click on a malicious link or visit a specifically crafted webpage while logged-in to the device web application, a remote unauthenticated attacker can execute arbitrary Axon queries against the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:58.000000Z"}, {"uuid": "d289bcd0-6efd-4cb0-a175-f0a667a2c0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40178", "type": "seen", "source": "https://t.me/cibsecurity/51107", "content": "\u203c CVE-2022-40178 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the \u00e2\u20ac\u0153Import Files\u00e2\u20ac\u0153 functionality of the \u00e2\u20ac\u0153Operation\u00e2\u20ac\ufffd web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:57.000000Z"}, {"uuid": "eaafb1e3-1a08-4a86-93f0-9fb03f793a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40138", "type": "seen", "source": "https://t.me/cibsecurity/51093", "content": "\u203c CVE-2022-40138 \u203c\n\nAn integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T07:25:26.000000Z"}, {"uuid": "17ac6a13-a038-406e-8db2-8f93bda5fd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40181", "type": "seen", "source": "https://t.me/cibsecurity/51114", "content": "\u203c CVE-2022-40181 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded browser does not prevent interaction with alternative URI schemes when redirected to corresponding resources by web application code. By setting the homepage URI, the favorite URIs, or redirecting embedded browser users via JavaScript code to alternative scheme resources, a remote low privileged attacker can perform a range of attacks against the device, such as read arbitrary files on the filesystem, execute arbitrary JavaScript code in order to steal or manipulate the information on the screen, or trigger denial of service conditions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:26:07.000000Z"}, {"uuid": "ece10f23-f762-40c6-8173-132750e358f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40177", "type": "seen", "source": "https://t.me/cibsecurity/51104", "content": "\u203c CVE-2022-40177 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Endpoints of the \u00e2\u20ac\u0153Operation\u00e2\u20ac\ufffd web application that interpret and execute Axon language queries allow file read access to the device file system with root privileges. By supplying specific I/O related Axon queries, a remote low-privileged attacker can read sensitive files on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:54.000000Z"}, {"uuid": "c7500f77-22ce-4feb-ab2a-7c193de17505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40182", "type": "seen", "source": "https://t.me/cibsecurity/51101", "content": "\u203c CVE-2022-40182 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded Chromium-based browser is launched as root with the \u00e2\u20ac\u0153--no-sandbox\u00e2\u20ac\ufffd option. Attackers can add arbitrary JavaScript code inside \u00e2\u20ac\u0153Operation\u00e2\u20ac\ufffd graphics and successfully exploit any number of publicly known vulnerabilities against the version of the embedded Chromium-based browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:50.000000Z"}, {"uuid": "5849e046-f713-4ac4-ae16-c8fed80b8e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40176", "type": "seen", "source": "https://t.me/cibsecurity/51097", "content": "\u203c CVE-2022-40176 \u203c\n\nA vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). There exists an Improper Neutralization of Special Elements used in an OS Command with root privileges during a restore operation due to the missing validation of the names of files included in the input package. By restoring a specifically crafted package, a remote low-privileged attacker can execute arbitrary system commands with root privileges on the device, leading to a full compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T14:25:44.000000Z"}, {"uuid": "401f99bc-a85f-4a74-8ad1-dcc898db816d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40832", "type": "seen", "source": "https://t.me/cibsecurity/50954", "content": "\u203c CVE-2022-40832 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php having() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:13.000000Z"}, {"uuid": "1e10a4c9-86da-4fc5-955e-7a3f5eedf611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40824", "type": "seen", "source": "https://t.me/cibsecurity/50953", "content": "\u203c CVE-2022-40824 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_where() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:12.000000Z"}, {"uuid": "1ef36d01-969c-4ffb-bfe5-794b53cd0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40494", "type": "seen", "source": "https://t.me/cibsecurity/50941", "content": "\u203c CVE-2022-40494 \u203c\n\nNPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T02:16:49.000000Z"}, {"uuid": "509eec3e-2dca-4d9a-9cb0-bab58cb4e2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40248", "type": "seen", "source": "https://t.me/cibsecurity/51077", "content": "\u203c CVE-2022-40248 \u203c\n\nAn HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the \"Product Affected\" field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T00:25:19.000000Z"}, {"uuid": "2e137f51-b4df-4bb5-b92e-0a558a359518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40405", "type": "seen", "source": "https://t.me/cibsecurity/52966", "content": "\u203c CVE-2022-40405 \u203c\n\nWoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-16T07:51:30.000000Z"}, {"uuid": "50d93dd5-4937-4b34-8d65-14cc7fee11a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40826", "type": "seen", "source": "https://t.me/cibsecurity/50967", "content": "\u203c CVE-2022-40826 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_having() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:30.000000Z"}, {"uuid": "23fc0148-ecf2-429e-9af5-ddb94125056e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40833", "type": "seen", "source": "https://t.me/cibsecurity/50966", "content": "\u203c CVE-2022-40833 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_where_in() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:28.000000Z"}, {"uuid": "023c593e-7ee3-4b91-a98f-f3488e29c839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40831", "type": "seen", "source": "https://t.me/cibsecurity/50965", "content": "\u203c CVE-2022-40831 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php like() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:27.000000Z"}, {"uuid": "e4a5ceaa-88e9-41f6-bbba-5bdb6e73d6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40872", "type": "seen", "source": "https://t.me/cibsecurity/50964", "content": "\u203c CVE-2022-40872 \u203c\n\nAn SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.php?classCode=, classCode.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:26.000000Z"}, {"uuid": "7d863b9c-7b90-46cb-8f34-ca6dd9ff9567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40830", "type": "seen", "source": "https://t.me/cibsecurity/50960", "content": "\u203c CVE-2022-40830 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php where_not_in() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:21.000000Z"}, {"uuid": "5ac3960f-e7e1-4822-ae88-16a6e3beacaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40828", "type": "seen", "source": "https://t.me/cibsecurity/50959", "content": "\u203c CVE-2022-40828 \u203c\n\nB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php or_where_not_in() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T14:17:20.000000Z"}, {"uuid": "1987d823-d42b-443f-885e-0bc48dbaaec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40161", "type": "seen", "source": "https://t.me/cibsecurity/50929", "content": "\u203c CVE-2022-40161 \u203c\n\nThose using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-06T22:23:07.000000Z"}, {"uuid": "bc99f07d-7701-4779-83b2-d4281b302f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40309", "type": "seen", "source": "https://t.me/cibsecurity/52987", "content": "\u203c CVE-2022-40309 \u203c\n\nUsers with write permissions to a repository can delete arbitrary directories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-16T07:54:35.000000Z"}, {"uuid": "e7f5fc0f-5938-4694-a841-7390a7448be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40981", "type": "seen", "source": "https://t.me/cibsecurity/52904", "content": "\u203c CVE-2022-40981 \u203c\n\nAll versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on the filesystem, fill the hard disk to full capacity, or compromise the affected device or computers with administrator level privileges connected to the affected device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:49:08.000000Z"}, {"uuid": "dfaf1cfd-dac4-47cf-8dba-bf27f6fc605f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:15:04.667039Z"}, {"uuid": "72004c2b-48f7-4ec2-932c-16b10433d629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40358", "type": "seen", "source": "https://t.me/cibsecurity/50412", "content": "\u203c CVE-2022-40358 \u203c\n\nAn issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:27:06.000000Z"}, {"uuid": "2e4e0ded-1e2c-4770-baf4-8ebdbde15fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40313", "type": "seen", "source": "https://t.me/cibsecurity/50781", "content": "\u203c CVE-2022-40313 \u203c\n\nRecursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:20.000000Z"}, {"uuid": "cfa594ce-4631-40d8-89c1-d2e4ba773031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40274", "type": "seen", "source": "https://t.me/cibsecurity/50777", "content": "\u203c CVE-2022-40274 \u203c\n\nGridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:15.000000Z"}, {"uuid": "c602fc95-80cb-4556-bb3c-68e8ecd817b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40157", "type": "seen", "source": "https://t.me/cibsecurity/50904", "content": "\u203c CVE-2022-40157 \u203c\n\nThose using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-06T22:16:56.000000Z"}, {"uuid": "0379dabb-f644-4319-969f-913f92cd5063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40922", "type": "seen", "source": "https://t.me/cibsecurity/50822", "content": "\u203c CVE-2022-40922 \u203c\n\nA vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-03T16:39:05.000000Z"}, {"uuid": "abaf3bc7-dca8-47b9-966b-b8fe4b06181d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40123", "type": "seen", "source": "https://t.me/cibsecurity/50821", "content": "\u203c CVE-2022-40123 \u203c\n\nmojoPortal v2.7 was discovered to contain a path traversal vulnerability via the \"f\" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-03T16:40:16.000000Z"}, {"uuid": "361de513-93eb-456b-a034-7ffd949ffe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40486", "type": "seen", "source": "https://t.me/cibsecurity/50575", "content": "\u203c CVE-2022-40486 \u203c\n\nTP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T16:34:07.000000Z"}, {"uuid": "751babf2-a694-4bed-938f-168f5a59baa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40298", "type": "seen", "source": "https://t.me/cibsecurity/50295", "content": "\u203c CVE-2022-40298 \u203c\n\nCrestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T07:12:53.000000Z"}, {"uuid": "4a2f0b13-0d3a-4c64-9a67-d351f40f97b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40867", "type": "seen", "source": "https://t.me/cibsecurity/50332", "content": "\u203c CVE-2022-40867 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:48.000000Z"}, {"uuid": "43a7b256-641b-479f-9e08-26dcace938ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40935", "type": "seen", "source": "https://t.me/cibsecurity/50285", "content": "\u203c CVE-2022-40935 \u203c\n\nOnline Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T20:12:42.000000Z"}, {"uuid": "147e906d-2e0a-488c-80b8-4861d22ad8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40160", "type": "seen", "source": "https://t.me/cibsecurity/50897", "content": "\u203c CVE-2022-40160 \u203c\n\nThose using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-06T22:16:47.000000Z"}, {"uuid": "85fe4ef4-8b4f-49c4-a2fa-2b234f2b37c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40944", "type": "seen", "source": "https://t.me/cibsecurity/50813", "content": "\u203c CVE-2022-40944 \u203c\n\nDairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:45.000000Z"}, {"uuid": "56a3a441-564e-4394-a187-2a08c73d733a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40341", "type": "seen", "source": "https://t.me/cibsecurity/50806", "content": "\u203c CVE-2022-40341 \u203c\n\nmojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:37.000000Z"}, {"uuid": "ee0640f9-c903-4265-909c-71859785c707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40261", "type": "seen", "source": "https://t.me/cibsecurity/50162", "content": "\u203c CVE-2022-40261 \u203c\n\nAn attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: OverClockSmiHandler SHA256: a204699576e1a48ce915d9d9423380c8e4c197003baf9d17e6504f0265f3039c Module GUID: 4698C2BD-A903-410E-AD1F-5EEF3A1AE422\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T22:39:44.000000Z"}, {"uuid": "b25f6d3f-965a-4a29-b6ce-504d1246a94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40316", "type": "seen", "source": "https://t.me/cibsecurity/50791", "content": "\u203c CVE-2022-40316 \u203c\n\nThe H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:34.000000Z"}, {"uuid": "627c61f1-c63f-4a00-9c37-f97227fb4854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40314", "type": "seen", "source": "https://t.me/cibsecurity/50790", "content": "\u203c CVE-2022-40314 \u203c\n\nA remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:30.000000Z"}, {"uuid": "868346ad-96a3-436a-bc23-26b3752d6f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40709", "type": "seen", "source": "https://t.me/cibsecurity/50639", "content": "\u203c CVE-2022-40709 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707 and 40708.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:47.000000Z"}, {"uuid": "0c4a7d27-25a9-440c-8f1f-c78d9a668103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40083", "type": "seen", "source": "https://t.me/cibsecurity/50583", "content": "\u203c CVE-2022-40083 \u203c\n\nLabstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T18:34:12.000000Z"}, {"uuid": "b2494072-8476-4a49-bb0a-8298d8fc6778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40784", "type": "seen", "source": "https://t.me/cibsecurity/50517", "content": "\u203c CVE-2022-40784 \u203c\n\nUnlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC camera firmware 5.3.1.2003161406.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:43.000000Z"}, {"uuid": "5042c147-30dd-4419-8d1d-42c402144a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40277", "type": "seen", "source": "https://t.me/cibsecurity/50784", "content": "\u203c CVE-2022-40277 \u203c\n\nJoplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the 'shell.openExternal' function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T20:36:23.000000Z"}, {"uuid": "6c526c98-1593-440d-b0f2-1368c8e40c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40408", "type": "seen", "source": "https://t.me/cibsecurity/50737", "content": "\u203c CVE-2022-40408 \u203c\n\nFeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T18:35:11.000000Z"}, {"uuid": "8feeb7b9-c13f-4130-801c-65dac24ff1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40407", "type": "seen", "source": "https://t.me/cibsecurity/50734", "content": "\u203c CVE-2022-40407 \u203c\n\nA zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T18:35:08.000000Z"}, {"uuid": "e296b72f-7d43-4836-917a-6bfde7b672c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40126", "type": "seen", "source": "https://t.me/cibsecurity/50727", "content": "\u203c CVE-2022-40126 \u203c\n\nA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T16:35:04.000000Z"}, {"uuid": "cf1271e2-d175-4452-b1f0-bedf6b9e961c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40363", "type": "seen", "source": "https://t.me/cibsecurity/50725", "content": "\u203c CVE-2022-40363 \u203c\n\nA buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T16:35:01.000000Z"}, {"uuid": "c9401470-535f-4f31-b895-8d4ef4b741f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40475", "type": "seen", "source": "https://t.me/cibsecurity/50724", "content": "\u203c CVE-2022-40475 \u203c\n\nTOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T16:35:00.000000Z"}, {"uuid": "9f948e3d-1c28-424a-9633-1b44247559ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40472", "type": "seen", "source": "https://t.me/cibsecurity/50744", "content": "\u203c CVE-2022-40472 \u203c\n\nZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T00:35:23.000000Z"}, {"uuid": "09ab6c2d-e3e9-4096-be4e-274db4a1a9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40890", "type": "seen", "source": "https://t.me/cibsecurity/50723", "content": "\u203c CVE-2022-40890 \u203c\n\nA vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T16:34:58.000000Z"}, {"uuid": "31fadcb4-1927-42ab-8986-6429ae66807c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40324", "type": "seen", "source": "https://t.me/cibsecurity/49571", "content": "\u203c CVE-2022-40324 \u203c\n\nSysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-12T00:23:45.000000Z"}, {"uuid": "61046dee-e56a-4807-9c3c-f9fe19eaf0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40715", "type": "seen", "source": "https://t.me/cibsecurity/50052", "content": "\u203c CVE-2022-40715 \u203c\n\nAn issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:04.000000Z"}, {"uuid": "4896bb19-d4c2-4436-9dca-1e0a969eda1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40426", "type": "seen", "source": "https://t.me/cibsecurity/50050", "content": "\u203c CVE-2022-40426 \u203c\n\nThe d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:01.000000Z"}, {"uuid": "4073b135-f9b9-4458-861a-c4dc3df727d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40278", "type": "seen", "source": "https://t.me/cibsecurity/50670", "content": "\u203c CVE-2022-40278 \u203c\n\nAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T07:44:50.000000Z"}, {"uuid": "97c0b895-0e88-4da3-a8d4-acd714a410b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40707", "type": "seen", "source": "https://t.me/cibsecurity/50630", "content": "\u203c CVE-2022-40707 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:35.000000Z"}, {"uuid": "47e64192-16ef-4f43-8fdd-39fd9a1e7f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40708", "type": "seen", "source": "https://t.me/cibsecurity/50630", "content": "\u203c CVE-2022-40707 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:35.000000Z"}, {"uuid": "74c0b940-c6de-451f-995e-5425e540a346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40877", "type": "seen", "source": "https://t.me/cibsecurity/50552", "content": "\u203c CVE-2022-40877 \u203c\n\nExam Reviewer Management System 1.0 is vulnerable to SQL Injection via the \u00e2\u20ac\u02dcid\u00e2\u20ac\u2122 parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:40.000000Z"}, {"uuid": "78e387b9-4332-4bf6-9152-69abbae67454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40354", "type": "seen", "source": "https://t.me/cibsecurity/50551", "content": "\u203c CVE-2022-40354 \u203c\n\nOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_booking.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:39.000000Z"}, {"uuid": "4305e5a4-995f-4ff8-8ccb-c16ecf13f834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40816", "type": "seen", "source": "https://t.me/cibsecurity/50550", "content": "\u203c CVE-2022-40816 \u203c\n\nZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web socket connection, so that a logged-in attacker would be able to fetch personal data of other users by querying the Zammad API. This issue is fixed in , 5.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:38.000000Z"}, {"uuid": "2df5468d-c414-4a3c-b742-a881aaeb45b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40707", "type": "seen", "source": "https://t.me/cibsecurity/50634", "content": "\u203c CVE-2022-40708 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:38.000000Z"}, {"uuid": "8e0db330-51c2-4f04-956d-bb74db63c959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40708", "type": "seen", "source": "https://t.me/cibsecurity/50634", "content": "\u203c CVE-2022-40708 \u203c\n\nAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:38.000000Z"}, {"uuid": "ddf41e8b-7593-42e1-8b8b-158d9053a5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40912", "type": "seen", "source": "https://t.me/cibsecurity/50586", "content": "\u203c CVE-2022-40912 \u203c\n\nETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T18:34:15.000000Z"}, {"uuid": "4dba1eec-5115-48b8-add1-07c7527ded99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40105", "type": "seen", "source": "https://t.me/cibsecurity/50393", "content": "\u203c CVE-2022-40105 \u203c\n\nTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:19:53.000000Z"}, {"uuid": "a1ad0805-220b-40ce-a4dd-522b8cd53f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40100", "type": "seen", "source": "https://t.me/cibsecurity/50391", "content": "\u203c CVE-2022-40100 \u203c\n\nTenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:19:48.000000Z"}, {"uuid": "9548ea9f-2ff7-499b-8c09-603f0d8f9d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40043", "type": "seen", "source": "https://t.me/cibsecurity/50520", "content": "\u203c CVE-2022-40043 \u203c\n\nCentreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:47.000000Z"}, {"uuid": "5b8a00b5-a424-4da4-b728-1cbb098c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40044", "type": "seen", "source": "https://t.me/cibsecurity/50519", "content": "\u203c CVE-2022-40044 \u203c\n\nCentreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:46.000000Z"}, {"uuid": "588dd11b-72ed-4de7-b1a1-bec063a412c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40485", "type": "seen", "source": "https://t.me/cibsecurity/50490", "content": "\u203c CVE-2022-40485 \u203c\n\nWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T18:36:28.000000Z"}, {"uuid": "37810145-603c-440d-a868-e33d84e92010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40942", "type": "seen", "source": "https://t.me/cibsecurity/50593", "content": "\u203c CVE-2022-40942 \u203c\n\nTenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T18:34:24.000000Z"}, {"uuid": "196a9e8b-8a05-4b54-91b7-f765c46e00bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40928", "type": "seen", "source": "https://t.me/cibsecurity/50477", "content": "\u203c CVE-2022-40928 \u203c\n\nOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:22:00.000000Z"}, {"uuid": "ddd6ff19-3cf3-4360-ac74-b6eda2e8e51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40926", "type": "seen", "source": "https://t.me/cibsecurity/50476", "content": "\u203c CVE-2022-40926 \u203c\n\nOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:21:59.000000Z"}, {"uuid": "05dc4510-496f-4177-bc71-d520112c5e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40925", "type": "seen", "source": "https://t.me/cibsecurity/50475", "content": "\u203c CVE-2022-40925 \u203c\n\nZoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the \"save_event\" file of the \"Events\" module in the background management system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:21:58.000000Z"}, {"uuid": "4621550f-76fe-4c23-ad4b-6bc6e53cb455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40927", "type": "seen", "source": "https://t.me/cibsecurity/50473", "content": "\u203c CVE-2022-40927 \u203c\n\nOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:21:56.000000Z"}, {"uuid": "70baea94-6541-4aa9-a4c0-d7e602082240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40082", "type": "seen", "source": "https://t.me/cibsecurity/50589", "content": "\u203c CVE-2022-40082 \u203c\n\nHertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T18:34:18.000000Z"}, {"uuid": "fe07ccf2-34c4-42b4-b004-76b1024b30e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40484", "type": "seen", "source": "https://t.me/cibsecurity/50495", "content": "\u203c CVE-2022-40484 \u203c\n\nWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T18:36:35.000000Z"}, {"uuid": "c29d162c-6d15-4f8f-90f5-8db1d889b265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40785", "type": "seen", "source": "https://t.me/cibsecurity/50494", "content": "\u203c CVE-2022-40785 \u203c\n\nUnsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T18:36:34.000000Z"}, {"uuid": "5f9b4508-b470-4a40-9227-33df80bb8303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40246", "type": "seen", "source": "https://t.me/cibsecurity/50160", "content": "\u203c CVE-2022-40246 \u203c\n\nA potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: SbPei SHA256: d827182e5f9b7a9ff0b9d3e232f7cfac43b5237e2681e11f005be627a49283a9 Module GUID: c1fbd624-27ea-40d1-aa48-94c3dc5c7e0d\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T22:39:41.000000Z"}, {"uuid": "e38ff11a-5cc4-4bbb-860d-117f2a1d2012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40817", "type": "seen", "source": "https://t.me/cibsecurity/50548", "content": "\u203c CVE-2022-40817 \u203c\n\nZammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related answers. This issue has been fixed in 5.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:34.000000Z"}, {"uuid": "91be95be-12ed-4cdb-ae41-304ebed39681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40353", "type": "seen", "source": "https://t.me/cibsecurity/50547", "content": "\u203c CVE-2022-40353 \u203c\n\nOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/up_booking.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:33.000000Z"}, {"uuid": "ba479f26-c5de-4631-b55e-b511f60ef8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40352", "type": "seen", "source": "https://t.me/cibsecurity/50545", "content": "\u203c CVE-2022-40352 \u203c\n\nOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_traveller.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:31.000000Z"}, {"uuid": "aa21013a-ef2c-4821-999e-cd8556c72f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40878", "type": "seen", "source": "https://t.me/cibsecurity/50544", "content": "\u203c CVE-2022-40878 \u203c\n\nIn Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:27.000000Z"}, {"uuid": "e4eb7f4a-7ebd-4433-bb62-3823ebbd7151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40199", "type": "seen", "source": "https://t.me/cibsecurity/50541", "content": "\u203c CVE-2022-40199 \u203c\n\nDirectory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:24.000000Z"}, {"uuid": "ed7b2f09-3284-45d2-ae2a-f4b23b1429c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40109", "type": "seen", "source": "https://t.me/cibsecurity/49322", "content": "\u203c CVE-2022-40109 \u203c\n\nTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T20:13:33.000000Z"}, {"uuid": "be88859a-1097-43eb-a05e-bcec80b7a26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40430", "type": "seen", "source": "https://t.me/cibsecurity/50065", "content": "\u203c CVE-2022-40430 \u203c\n\nThe d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:19.000000Z"}, {"uuid": "d517ed39-023f-492f-8918-729626835d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40432", "type": "seen", "source": "https://t.me/cibsecurity/50064", "content": "\u203c CVE-2022-40432 \u203c\n\nThe d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:18.000000Z"}, {"uuid": "d760f2dd-8b9b-40b8-bcd3-a462a6a99b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40431", "type": "seen", "source": "https://t.me/cibsecurity/50063", "content": "\u203c CVE-2022-40431 \u203c\n\nThe d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:16.000000Z"}, {"uuid": "0700926a-e487-4bfe-bcd0-5eecb6db8841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40425", "type": "seen", "source": "https://t.me/cibsecurity/50054", "content": "\u203c CVE-2022-40425 \u203c\n\nThe d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T20:38:07.000000Z"}, {"uuid": "e22828f4-64dc-4da2-ad58-4293feeaac14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40067", "type": "seen", "source": "https://t.me/cibsecurity/50047", "content": "\u203c CVE-2022-40067 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:19.000000Z"}, {"uuid": "b1f9810d-ac39-44d6-ab47-4ae8cc4c46c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40402", "type": "seen", "source": "https://t.me/cibsecurity/50485", "content": "\u203c CVE-2022-40402 \u203c\n\nWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:22:09.000000Z"}, {"uuid": "d352e3e0-143e-4718-82eb-640374212408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40311", "type": "seen", "source": "https://t.me/cibsecurity/51935", "content": "\u203c CVE-2022-40311 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-21T20:22:52.000000Z"}, {"uuid": "002dac0c-0f3d-49bb-b98e-130c7e00ed27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40924", "type": "seen", "source": "https://t.me/cibsecurity/50468", "content": "\u203c CVE-2022-40924 \u203c\n\nZoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the \"save_animal\" file of the \"Animals\" module in the background management system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:21:48.000000Z"}, {"uuid": "efd9f41b-e0d8-4f12-b912-d53a8126d771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "seen", "source": "https://t.me/cibsecurity/50331", "content": "\u203c CVE-2022-40869 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:47.000000Z"}, {"uuid": "621845ad-c8c0-47b3-a57c-c72203bb7a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "seen", "source": "https://t.me/cibsecurity/50329", "content": "\u203c CVE-2022-40865 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:45.000000Z"}, {"uuid": "1e1cc6a8-23a0-458f-8d1c-b694c81c8f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40193", "type": "seen", "source": "https://t.me/cibsecurity/50328", "content": "\u203c CVE-2022-40193 \u203c\n\nUnauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:41.000000Z"}, {"uuid": "43159d00-1791-4102-abdd-922f6f2f46ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40860", "type": "seen", "source": "https://t.me/cibsecurity/50326", "content": "\u203c CVE-2022-40860 \u203c\n\nTenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:39.000000Z"}, {"uuid": "9ec961b1-0db1-41bd-b819-7ebe9fe1c2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40853", "type": "seen", "source": "https://t.me/cibsecurity/50323", "content": "\u203c CVE-2022-40853 \u203c\n\nTenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:33.000000Z"}, {"uuid": "59abf6bb-a770-4ab8-99c5-deb3cc671a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40754", "type": "seen", "source": "https://t.me/cibsecurity/50182", "content": "\u203c CVE-2022-40754 \u203c\n\nIn Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T12:40:46.000000Z"}, {"uuid": "b3c23e4e-d0c4-42b1-8608-33ccdb0715ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40604", "type": "seen", "source": "https://t.me/cibsecurity/50178", "content": "\u203c CVE-2022-40604 \u203c\n\nIn Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T12:40:39.000000Z"}, {"uuid": "996446f8-e01e-4b64-9c3e-074c0677f6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40106", "type": "seen", "source": "https://t.me/cibsecurity/50410", "content": "\u203c CVE-2022-40106 \u203c\n\nTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:27:04.000000Z"}, {"uuid": "d5c09675-491f-47e9-94c2-253626f4b88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40934", "type": "seen", "source": "https://t.me/cibsecurity/50277", "content": "\u203c CVE-2022-40934 \u203c\n\nOnline Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T20:12:29.000000Z"}, {"uuid": "f39217ac-461f-408c-9e25-851e4cc4ca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40629", "type": "seen", "source": "https://t.me/cibsecurity/50383", "content": "\u203c CVE-2022-40629 \u203c\n\nThis vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:14:00.000000Z"}, {"uuid": "73ed33c1-8ec5-42ab-b2f8-a01fcdcff165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40194", "type": "seen", "source": "https://t.me/cibsecurity/50354", "content": "\u203c CVE-2022-40194 \u203c\n\nUnauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T20:43:41.000000Z"}, {"uuid": "00c92281-e621-4d94-8a61-1541dba6c005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40861", "type": "seen", "source": "https://t.me/cibsecurity/50320", "content": "\u203c CVE-2022-40861 \u203c\n\nTenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T09:34:03.000000Z"}, {"uuid": "348d6687-f86e-4ee2-b9b0-57213ee47ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40854", "type": "seen", "source": "https://t.me/cibsecurity/50319", "content": "\u203c CVE-2022-40854 \u203c\n\nTenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:29.000000Z"}, {"uuid": "ebba92a6-5557-41a5-8aee-1a7e1c375b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40716", "type": "seen", "source": "https://t.me/cibsecurity/50316", "content": "\u203c CVE-2022-40716 \u203c\n\nHashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T16:28:22.000000Z"}, {"uuid": "52bd8475-4f8f-4c91-bae7-3ad629a0801a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40215", "type": "seen", "source": "https://t.me/cibsecurity/50352", "content": "\u203c CVE-2022-40215 \u203c\n\nMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T20:43:39.000000Z"}, {"uuid": "06416569-41eb-497f-8ccd-75acf9f03150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40028", "type": "seen", "source": "https://t.me/cibsecurity/50222", "content": "\u203c CVE-2022-40028 \u203c\n\nSourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:19.000000Z"}, {"uuid": "8f788c96-567a-44a2-9c5b-a7ff75db4684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40636", "type": "seen", "source": "https://t.me/cibsecurity/49842", "content": "\u203c CVE-2022-40636 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17044.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:52.000000Z"}, {"uuid": "8c4ff589-95cb-4ba0-9270-ef5036674ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40864", "type": "seen", "source": "https://t.me/cibsecurity/50338", "content": "\u203c CVE-2022-40864 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:57.000000Z"}, {"uuid": "2f17b410-5c3c-4d20-9493-e6cd9ab77caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40851", "type": "seen", "source": "https://t.me/cibsecurity/50337", "content": "\u203c CVE-2022-40851 \u203c\n\nTenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:56.000000Z"}, {"uuid": "0ef7c4d2-cc71-4ee3-b058-ecf90097cf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40868", "type": "seen", "source": "https://t.me/cibsecurity/50336", "content": "\u203c CVE-2022-40868 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:55.000000Z"}, {"uuid": "c1ea0583-10d3-427e-baeb-96fe69c2994a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40866", "type": "seen", "source": "https://t.me/cibsecurity/50335", "content": "\u203c CVE-2022-40866 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:54.000000Z"}, {"uuid": "00151eaa-2120-455a-ac36-2e44a4be6704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40628", "type": "seen", "source": "https://t.me/cibsecurity/50358", "content": "\u203c CVE-2022-40628 \u203c\n\nThis vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary commands on the targeted device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T20:43:46.000000Z"}, {"uuid": "29f915cd-1c12-42c8-b99b-b9f6b19df2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40188", "type": "seen", "source": "https://t.me/cibsecurity/50356", "content": "\u203c CVE-2022-40188 \u203c\n\nKnot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T20:43:43.000000Z"}, {"uuid": "656e99ac-0b5c-4c96-9064-4cc8ba43ab78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40932", "type": "seen", "source": "https://t.me/cibsecurity/50292", "content": "\u203c CVE-2022-40932 \u203c\n\nIn Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the \"gallery\" file of the \"Gallery\" module in the background management system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T20:12:51.000000Z"}, {"uuid": "dd32a05c-bde4-40d0-a3fc-f9b85b4d0b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40933", "type": "seen", "source": "https://t.me/cibsecurity/50291", "content": "\u203c CVE-2022-40933 \u203c\n\nOnline Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T20:12:50.000000Z"}, {"uuid": "5bcb7c51-4d99-49c8-8210-b02b0affd0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40186", "type": "seen", "source": "https://t.me/cibsecurity/50252", "content": "\u203c CVE-2022-40186 \u203c\n\nAn issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:45.000000Z"}, {"uuid": "13b0a8c1-5842-4112-b027-afe31d2c8679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40026", "type": "seen", "source": "https://t.me/cibsecurity/50226", "content": "\u203c CVE-2022-40026 \u203c\n\nSourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:24.000000Z"}, {"uuid": "ebcccaf4-0864-42f3-bd21-ca4554b86c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40029", "type": "seen", "source": "https://t.me/cibsecurity/50220", "content": "\u203c CVE-2022-40029 \u203c\n\nSourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:16.000000Z"}, {"uuid": "be730b4c-1be0-42a0-969b-06015db9b6c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40444", "type": "seen", "source": "https://t.me/cibsecurity/50268", "content": "\u203c CVE-2022-40444 \u203c\n\nZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T18:12:21.000000Z"}, {"uuid": "6de3e2fd-954b-4ea1-a1c7-b4208571445d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/cibsecurity/50266", "content": "\u203c CVE-2022-40146 \u203c\n\nServer-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T18:12:19.000000Z"}, {"uuid": "c1d47cee-3cf4-46b1-b1d6-9496b78dacd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40447", "type": "seen", "source": "https://t.me/cibsecurity/50265", "content": "\u203c CVE-2022-40447 \u203c\n\nZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T18:12:17.000000Z"}, {"uuid": "d2481aea-0c4c-4359-bfad-d7933c2e16c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40443", "type": "seen", "source": "https://t.me/cibsecurity/50264", "content": "\u203c CVE-2022-40443 \u203c\n\nAn absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T18:12:16.000000Z"}, {"uuid": "879229da-a8e8-4269-b386-15e60a9b49ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40446", "type": "seen", "source": "https://t.me/cibsecurity/50263", "content": "\u203c CVE-2022-40446 \u203c\n\nZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T18:12:16.000000Z"}, {"uuid": "465ea2af-8f7d-4878-a6e5-36ba40a8810f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40761", "type": "seen", "source": "https://t.me/cibsecurity/50006", "content": "\u203c CVE-2022-40761 \u203c\n\nThe function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-17T02:35:22.000000Z"}, {"uuid": "45b3749d-39bd-4f10-9972-784d4e11c9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "33ea7b52-8133-441e-9ac0-00e0c377dffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40217", "type": "seen", "source": "https://t.me/cibsecurity/50246", "content": "\u203c CVE-2022-40217 \u203c\n\nAuthenticated (admin+) Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T00:46:20.000000Z"}, {"uuid": "7ce0bf25-7f81-4335-884c-3884d357ec51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40027", "type": "seen", "source": "https://t.me/cibsecurity/50236", "content": "\u203c CVE-2022-40027 \u203c\n\nSourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:36.000000Z"}, {"uuid": "025aa2d5-c5cc-4f6f-999b-f69b17a024f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40030", "type": "seen", "source": "https://t.me/cibsecurity/50235", "content": "\u203c CVE-2022-40030 \u203c\n\nSourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:35.000000Z"}, {"uuid": "8d53234b-e9e2-47e9-aed7-2ab1c96e3973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40219", "type": "seen", "source": "https://t.me/cibsecurity/50227", "content": "\u203c CVE-2022-40219 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T22:41:25.000000Z"}, {"uuid": "283b3718-9ca7-4e16-a19a-76cb77a49e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40073", "type": "seen", "source": "https://t.me/cibsecurity/50034", "content": "\u203c CVE-2022-40073 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:02.000000Z"}, {"uuid": "358bf4e8-9a5e-414c-b150-c0cf6084c8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40191", "type": "seen", "source": "https://t.me/cibsecurity/49504", "content": "\u203c CVE-2022-40191 \u203c\n\nAuthenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-09T18:26:35.000000Z"}, {"uuid": "82ecab0c-b02c-4143-bf6c-47ab22527b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40250", "type": "seen", "source": "https://t.me/cibsecurity/50157", "content": "\u203c CVE-2022-40250 \u203c\n\nAn attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: SmmSmbiosElog SHA256: 3a8acb4f9bddccb19ec3b22b22ad97963711550f76b27b606461cd5073a93b59 Module GUID: 8e61fd6b-7a8b-404f-b83f-aa90a47cabdf This issue affects: AMI Aptio 5.x. This issue affects: AMI Aptio 5.x.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T22:39:38.000000Z"}, {"uuid": "69e2d4ee-aaf6-47fd-ab25-1cead90e8e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40262", "type": "seen", "source": "https://t.me/cibsecurity/50154", "content": "\u203c CVE-2022-40262 \u203c\n\nA potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T22:39:35.000000Z"}, {"uuid": "6de9f443-23fd-4fbf-9e6c-72494eebc068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40955", "type": "seen", "source": "https://t.me/cibsecurity/50140", "content": "\u203c CVE-2022-40955 \u203c\n\nIn versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the Apache InLong server. Users are advised to upgrade to Apache InLong 1.3.0 or newer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T18:39:16.000000Z"}, {"uuid": "76ba2be4-140b-43a1-8598-b5bea328d0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40980", "type": "seen", "source": "https://t.me/cibsecurity/50085", "content": "\u203c CVE-2022-40980 \u203c\n\nA potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:21.000000Z"}, {"uuid": "350686e1-a71d-4be3-8974-68c926ad424f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40143", "type": "seen", "source": "https://t.me/cibsecurity/50084", "content": "\u203c CVE-2022-40143 \u203c\n\nA link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:20.000000Z"}, {"uuid": "3652c4f3-e67c-4865-ba11-493e80f56c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40142", "type": "seen", "source": "https://t.me/cibsecurity/50080", "content": "\u203c CVE-2022-40142 \u203c\n\nA security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a writable folder in an arbitrary location and escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:17.000000Z"}, {"uuid": "94b9c132-5ef3-46ab-a7e2-22dff69312a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40141", "type": "seen", "source": "https://t.me/cibsecurity/50078", "content": "\u203c CVE-2022-40141 \u203c\n\nA vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certain communication strings that may contain some identification attributes of a particular Apex One server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:14.000000Z"}, {"uuid": "fd083d7b-7b71-49b5-ac83-8c4e9fe89b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40608", "type": "seen", "source": "https://t.me/cibsecurity/50077", "content": "\u203c CVE-2022-40608 \u203c\n\nIBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:13.000000Z"}, {"uuid": "1a04b376-0338-450d-a509-a4fedbf25710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40144", "type": "seen", "source": "https://t.me/cibsecurity/50076", "content": "\u203c CVE-2022-40144 \u203c\n\nA vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product\u00e2\u20ac\u2122s login authentication by falsifying request parameters on affected installations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:12.000000Z"}, {"uuid": "a99d0ac1-5267-4205-8317-a923ce4002d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/cibsecurity/50074", "content": "\u203c CVE-2022-40140 \u203c\n\nAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:10.000000Z"}, {"uuid": "c51746e7-16ba-43a8-b019-060bba61b0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40074", "type": "seen", "source": "https://t.me/cibsecurity/50029", "content": "\u203c CVE-2022-40074 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:37:55.000000Z"}, {"uuid": "8da5051d-6b9d-4384-aafd-36cdbae7749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40811", "type": "seen", "source": "https://t.me/cibsecurity/50028", "content": "\u203c CVE-2022-40811 \u203c\n\nThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:37:54.000000Z"}, {"uuid": "cb4753d5-9593-4000-8246-d286cc65c5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40133", "type": "seen", "source": "https://t.me/cibsecurity/49525", "content": "\u203c CVE-2022-40133 \u203c\n\nA use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-09T18:32:25.000000Z"}, {"uuid": "75563bec-681b-4a2e-bd56-f1d3939488b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://t.me/cibsecurity/50073", "content": "\u203c CVE-2022-40139 \u203c\n\nImproper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:09.000000Z"}, {"uuid": "080a27a9-7236-4bd2-9d44-df8c2f3be8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40234", "type": "seen", "source": "https://t.me/cibsecurity/50072", "content": "\u203c CVE-2022-40234 \u203c\n\nVersions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T22:38:07.000000Z"}, {"uuid": "a833b62c-ca1a-466f-be93-28935ca4e823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40778", "type": "seen", "source": "https://t.me/cibsecurity/50025", "content": "\u203c CVE-2022-40778 \u203c\n\nA stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T12:37:27.000000Z"}, {"uuid": "14e822b4-d27d-45f0-a3fe-b48be35ccf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40427", "type": "seen", "source": "https://t.me/cibsecurity/50044", "content": "\u203c CVE-2022-40427 \u203c\n\nThe d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:15.000000Z"}, {"uuid": "24869b91-6d00-43e0-a698-74d1fa594644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40806", "type": "seen", "source": "https://t.me/cibsecurity/50043", "content": "\u203c CVE-2022-40806 \u203c\n\nThe d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:14.000000Z"}, {"uuid": "798e3f78-3c22-4ee5-97e6-7305b02aeaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40807", "type": "seen", "source": "https://t.me/cibsecurity/50042", "content": "\u203c CVE-2022-40807 \u203c\n\nThe d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:12.000000Z"}, {"uuid": "f818188e-e0dc-474a-a01d-4d1dd5cc8322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40072", "type": "seen", "source": "https://t.me/cibsecurity/50041", "content": "\u203c CVE-2022-40072 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:11.000000Z"}, {"uuid": "1adcc3ef-5743-45c3-a745-82b50ec09121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40808", "type": "seen", "source": "https://t.me/cibsecurity/50040", "content": "\u203c CVE-2022-40808 \u203c\n\nThe d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:10.000000Z"}, {"uuid": "8c99f5fb-2996-45f9-8a45-6c3ccba7cba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40071", "type": "seen", "source": "https://t.me/cibsecurity/50039", "content": "\u203c CVE-2022-40071 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:08.000000Z"}, {"uuid": "4a49209f-6b08-47a4-99a8-1c1f7fe0deba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40075", "type": "seen", "source": "https://t.me/cibsecurity/50037", "content": "\u203c CVE-2022-40075 \u203c\n\nTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:06.000000Z"}, {"uuid": "a964d126-7f54-43bc-afc6-f45e61a77119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40069", "type": "seen", "source": "https://t.me/cibsecurity/50036", "content": "\u203c CVE-2022-40069 \u203c\n\n]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T18:38:04.000000Z"}, {"uuid": "db90ea16-594a-4b38-aab7-5ea08ce7af8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40774", "type": "seen", "source": "https://t.me/cibsecurity/50024", "content": "\u203c CVE-2022-40774 \u203c\n\nAn issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T05:23:58.000000Z"}, {"uuid": "0ca9ac95-b51d-4cc4-bf27-8ee9334bc8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40775", "type": "seen", "source": "https://t.me/cibsecurity/50023", "content": "\u203c CVE-2022-40775 \u203c\n\nAn issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-18T22:36:26.000000Z"}, {"uuid": "abd0339e-39ef-466a-8fe5-fa5caad8e273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40769", "type": "exploited", "source": "https://t.me/cibsecurity/50022", "content": "\u203c CVE-2022-40769 \u203c\n\nprofanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-18T20:36:20.000000Z"}, {"uuid": "f395c42a-7f51-42aa-b74c-14bf884661a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40766", "type": "seen", "source": "https://t.me/cibsecurity/50021", "content": "\u203c CVE-2022-40766 \u203c\n\nModern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '\" OR 1 = 1 -- - , ", "creation_timestamp": "2022-09-18T12:35:57.000000Z"}, {"uuid": "a9431549-3d02-4c58-99a3-a2748b2d53e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40768", "type": "seen", "source": "https://t.me/cibsecurity/50020", "content": "\u203c CVE-2022-40768 \u203c\n\ndrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-19T05:05:51.000000Z"}, {"uuid": "df56bd0c-f418-42f8-b400-21d1e66e4fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40757", "type": "seen", "source": "https://t.me/cibsecurity/50002", "content": "\u203c CVE-2022-40757 \u203c\n\nA Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACComputeFinal with an excessive size value of messageLen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-17T02:35:18.000000Z"}, {"uuid": "98920128-156e-4bc9-ae50-6c92cce9eb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40337", "type": "seen", "source": "https://t.me/cibsecurity/49926", "content": "\u203c CVE-2022-40337 \u203c\n\nOASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T20:28:51.000000Z"}, {"uuid": "e9319406-7531-4e5b-9669-5b08a6106912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40150", "type": "seen", "source": "https://t.me/cibsecurity/49900", "content": "\u203c CVE-2022-40150 \u203c\n\nThose using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:41:42.000000Z"}, {"uuid": "c3f3969c-e3e7-4b34-bcb2-322b003519c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40156", "type": "seen", "source": "https://t.me/cibsecurity/49899", "content": "\u203c CVE-2022-40156 \u203c\n\nThose using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:41:42.000000Z"}, {"uuid": "0b7eab1e-19cc-4e73-9444-1d37a6f3a066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40155", "type": "seen", "source": "https://t.me/cibsecurity/49901", "content": "\u203c CVE-2022-40155 \u203c\n\nThose using Xstream to serialise XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:44:44.000000Z"}, {"uuid": "d17bc43a-bbb9-4cfc-9481-eb0ef1a0e15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40149", "type": "seen", "source": "https://t.me/cibsecurity/49897", "content": "\u203c CVE-2022-40149 \u203c\n\nThose using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:38:41.000000Z"}, {"uuid": "3215c1de-79ae-449a-95e8-5b93f0e73027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40151", "type": "seen", "source": "https://t.me/cibsecurity/49896", "content": "\u203c CVE-2022-40151 \u203c\n\nThose using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:38:40.000000Z"}, {"uuid": "78443682-5aec-43d1-867e-4a77664750d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40153", "type": "seen", "source": "https://t.me/cibsecurity/49895", "content": "\u203c CVE-2022-40153 \u203c\n\nThose using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:38:39.000000Z"}, {"uuid": "902af68f-f71a-464b-acb9-2d192483152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40152", "type": "seen", "source": "https://t.me/cibsecurity/49894", "content": "\u203c CVE-2022-40152 \u203c\n\nThose using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:33:38.000000Z"}, {"uuid": "b1bec7c2-75c0-4802-a28d-d9f10c064a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40154", "type": "seen", "source": "https://t.me/cibsecurity/49893", "content": "\u203c CVE-2022-40154 \u203c\n\nThose using Xstream to serialise XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T14:33:38.000000Z"}, {"uuid": "b3a51444-3d70-49b2-988f-8c1d707723a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40084", "type": "seen", "source": "https://t.me/cibsecurity/51887", "content": "\u203c CVE-2022-40084 \u203c\n\nOpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-20T18:21:17.000000Z"}, {"uuid": "71daf207-0c33-4acf-ac31-de818fd93e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40884", "type": "seen", "source": "https://t.me/cibsecurity/51817", "content": "\u203c CVE-2022-40884 \u203c\n\nBento4 1.6.0 has memory leaks via the mp4fragment.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-19T22:15:26.000000Z"}, {"uuid": "4e634723-3697-4c25-b359-bc60741d5f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40654", "type": "seen", "source": "https://t.me/cibsecurity/49836", "content": "\u203c CVE-2022-40654 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_T files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18351.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:43.000000Z"}, {"uuid": "b71b220c-0563-4d39-bee9-3bbd90edbc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40734", "type": "exploited", "source": "https://t.me/cibsecurity/49805", "content": "\u203c CVE-2022-40734 \u203c\n\nUniSharp laravel-filemanager (aka Laravel Filemanager) through 2.5.1 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T02:26:45.000000Z"}, {"uuid": "8f7a02d5-d203-4beb-9c01-813d975266d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40622", "type": "seen", "source": "https://t.me/cibsecurity/49733", "content": "\u203c CVE-2022-40622 \u203c\n\nThe WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T00:25:59.000000Z"}, {"uuid": "446f7bfd-c2b6-4441-8dcc-74f7039d3c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40623", "type": "seen", "source": "https://t.me/cibsecurity/49732", "content": "\u203c CVE-2022-40623 \u203c\n\nThe WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T00:25:59.000000Z"}, {"uuid": "e6b32b00-3795-4222-aba3-5dab2f597464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40647", "type": "seen", "source": "https://t.me/cibsecurity/49831", "content": "\u203c CVE-2022-40647 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17558.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:38.000000Z"}, {"uuid": "f797dfb5-3c2c-4d2a-89ba-833d17c7c237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40673", "type": "seen", "source": "https://t.me/cibsecurity/49768", "content": "\u203c CVE-2022-40673 \u203c\n\nKDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:34.000000Z"}, {"uuid": "29d0583f-34b8-4533-af49-04fad20333d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40626", "type": "seen", "source": "https://t.me/cibsecurity/49765", "content": "\u203c CVE-2022-40626 \u203c\n\nAn unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:30.000000Z"}, {"uuid": "db2a9548-9804-415b-9b83-e37a0b70d5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://t.me/cibsecurity/49763", "content": "\u203c CVE-2022-40674 \u203c\n\nlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:28.000000Z"}, {"uuid": "083730f1-d4d7-4cff-b854-4e9a350d6822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40306", "type": "seen", "source": "https://t.me/cibsecurity/49829", "content": "\u203c CVE-2022-40306 \u203c\n\nThe login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) through 2022-06-27 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service (DoS) by requesting that form repeatedly.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T12:56:08.000000Z"}, {"uuid": "5a147346-9f1f-4605-9e2d-e4fb65b88e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40634", "type": "seen", "source": "https://t.me/cibsecurity/49703", "content": "\u203c CVE-2022-40634 \u203c\n\nImproper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-13T22:31:45.000000Z"}, {"uuid": "51fbb924-4ad0-497a-a101-e71e309e12ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40635", "type": "seen", "source": "https://t.me/cibsecurity/49699", "content": "\u203c CVE-2022-40635 \u203c\n\nImproper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-13T22:31:41.000000Z"}, {"uuid": "e635a726-94d0-48df-a242-f8a6e2b9e2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40649", "type": "seen", "source": "https://t.me/cibsecurity/49833", "content": "\u203c CVE-2022-40649 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17565.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:40.000000Z"}, {"uuid": "00d5e964-6624-47dd-970a-eb7aecf3e5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40641", "type": "seen", "source": "https://t.me/cibsecurity/49832", "content": "\u203c CVE-2022-40641 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17317.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:39.000000Z"}, {"uuid": "99a81a11-aaab-4867-90a6-881099db0dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40663", "type": "seen", "source": "https://t.me/cibsecurity/49835", "content": "\u203c CVE-2022-40663 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:42.000000Z"}, {"uuid": "86ab2426-daff-4029-8544-7b99006d4e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40645", "type": "seen", "source": "https://t.me/cibsecurity/49840", "content": "\u203c CVE-2022-40645 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17540.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:47.000000Z"}, {"uuid": "c2bb001b-7c95-4cb7-b51d-f92a951399f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40657", "type": "seen", "source": "https://t.me/cibsecurity/49839", "content": "\u203c CVE-2022-40657 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. Crafted data in a PSD file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15073.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:46.000000Z"}, {"uuid": "fa84fc31-1ee9-4684-b023-5da0496f2091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40660", "type": "seen", "source": "https://t.me/cibsecurity/49838", "content": "\u203c CVE-2022-40660 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15135.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:45.000000Z"}, {"uuid": "8d0bb695-ac0c-49ff-8ada-fde9f5ff2377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/cibsecurity/49850", "content": "\u203c CVE-2022-40648 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:04.000000Z"}, {"uuid": "e9f0d7a3-d83a-48e2-8aa3-658a403b97d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40650", "type": "seen", "source": "https://t.me/cibsecurity/49849", "content": "\u203c CVE-2022-40650 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17838.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:02.000000Z"}, {"uuid": "52e8657d-0d5f-4c21-8c7b-3133c25410c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40640", "type": "seen", "source": "https://t.me/cibsecurity/49848", "content": "\u203c CVE-2022-40640 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17308.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:01.000000Z"}, {"uuid": "f2bfbf54-3517-4cf5-b4a6-5e6f7da6b17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40661", "type": "seen", "source": "https://t.me/cibsecurity/49846", "content": "\u203c CVE-2022-40661 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15134.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:59.000000Z"}, {"uuid": "69e321c1-dbc2-42e6-912c-b0e52d22f3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40643", "type": "seen", "source": "https://t.me/cibsecurity/49844", "content": "\u203c CVE-2022-40643 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17407.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:55.000000Z"}, {"uuid": "388be48d-2dac-45ce-bb9a-5621f206ffbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40639", "type": "seen", "source": "https://t.me/cibsecurity/49834", "content": "\u203c CVE-2022-40639 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17207.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:41.000000Z"}, {"uuid": "859b5383-b4b8-4535-a021-950192fedaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40621", "type": "seen", "source": "https://t.me/cibsecurity/49729", "content": "\u203c CVE-2022-40621 \u203c\n\nBecause the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T00:25:53.000000Z"}, {"uuid": "c39e4e63-5273-4c8f-be64-748682b4010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40299", "type": "seen", "source": "https://t.me/cibsecurity/49486", "content": "\u203c CVE-2022-40299 \u203c\n\nIn Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathnames; this CVE Record is not about the lack of a safe temporary-file creation capability in the Singular language.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-09T07:15:48.000000Z"}, {"uuid": "06c3abc7-70e1-48fb-bf85-84dfa9e766ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40320", "type": "seen", "source": "https://t.me/cibsecurity/49565", "content": "\u203c CVE-2022-40320 \u203c\n\ncfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-10T05:43:52.000000Z"}, {"uuid": "7dd14419-4447-4775-b55c-abcc84d92b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40322", "type": "seen", "source": "https://t.me/cibsecurity/49570", "content": "\u203c CVE-2022-40322 \u203c\n\nSysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-12T00:23:44.000000Z"}, {"uuid": "9e254865-2dcc-4d37-874f-426541d2443d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40323", "type": "seen", "source": "https://t.me/cibsecurity/49569", "content": "\u203c CVE-2022-40323 \u203c\n\nSysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-12T00:23:43.000000Z"}, {"uuid": "28ae695d-7ec8-47a5-b843-5b4b67b90b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40325", "type": "seen", "source": "https://t.me/cibsecurity/49568", "content": "\u203c CVE-2022-40325 \u203c\n\nSysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-12T00:23:41.000000Z"}, {"uuid": "ce568f89-e558-42cb-9a65-fb1ee71c9835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40317", "type": "seen", "source": "https://t.me/cibsecurity/49548", "content": "\u203c CVE-2022-40317 \u203c\n\nOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-09T20:30:21.000000Z"}, {"uuid": "da289760-cc55-454b-b3fc-887238547a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40297", "type": "seen", "source": "https://t.me/cibsecurity/49487", "content": "\u203c CVE-2022-40297 \u203c\n\nUBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-09T07:15:49.000000Z"}, {"uuid": "91ac282e-f911-4dde-8121-83049ea1d529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40023", "type": "seen", "source": "https://t.me/cibsecurity/49395", "content": "\u203c CVE-2022-40023 \u203c\n\nSqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-07T16:14:03.000000Z"}, {"uuid": "c31e0e8f-b1d8-4f47-b8d1-21a9112e3077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40111", "type": "seen", "source": "https://t.me/cibsecurity/49311", "content": "\u203c CVE-2022-40111 \u203c\n\nIn TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T20:13:18.000000Z"}, {"uuid": "8b66fe8a-cf68-4f72-85f8-515231638451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40110", "type": "seen", "source": "https://t.me/cibsecurity/49315", "content": "\u203c CVE-2022-40110 \u203c\n\nTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T20:13:25.000000Z"}, {"uuid": "538b4fdb-1a81-41cb-9834-9e9ae1ea32d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40112", "type": "seen", "source": "https://t.me/cibsecurity/49320", "content": "\u203c CVE-2022-40112 \u203c\n\nTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T20:13:31.000000Z"}, {"uuid": "b31c503d-ff65-474f-8397-dd8aeb902cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2841", "content": "[CVE-2022-40303] Integer overflow in xmlParseNameComplex https://gitlab.gnome.org/GNOME/libxml2/-/issues/381", "creation_timestamp": "2026-08-02T21:04:24.419491Z"}, {"uuid": "907508a4-52a4-41c3-91c7-9a37ed2d0705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2880", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096) https://infosecwriteups.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2", "creation_timestamp": "2026-08-02T21:06:34.885232Z"}, {"uuid": "adbfe8c0-762e-40ca-a976-cbcd6752d637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1380", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nPoC\n\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-08-04T04:00:03.944449Z"}, {"uuid": "7968d7bd-9344-4b47-8bca-cb988db88585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2880", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096) https://infosecwriteups.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2", "creation_timestamp": "2026-08-03T00:54:48.429909Z"}, {"uuid": "b5022d27-d88c-4adc-bc10-f61dabc48758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2841", "content": "[CVE-2022-40303] Integer overflow in xmlParseNameComplex https://gitlab.gnome.org/GNOME/libxml2/-/issues/381", "creation_timestamp": "2026-08-03T01:29:52.944954Z"}, {"uuid": "77ff814d-d4b9-47a7-93e8-7bd3978d409f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3466", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-08-03T01:51:30.549311Z"}, {"uuid": "e13e6d7d-b830-4875-8014-656ad7c56232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3465", "content": "Fortinet Series 1 \u2014 Analysis of CVE-2022\u201340684 https://medium.com/@INTfinity/fortinet-series-1-analysis-of-cve-2022-40684-88870994e6e0", "creation_timestamp": "2026-08-03T01:51:30.623873Z"}, {"uuid": "2441226a-4b61-422d-84ef-fccb1201653d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3415", "content": "https://github.com/secunnix/CVE-2022-40684", "creation_timestamp": "2022-10-14T16:30:15.000000Z"}, {"uuid": "5ece1c06-69e9-43fb-b835-6c5d13cdb8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/purpleshift/77", "content": "\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0440\u0445\u0438\u0432 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate (\u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Fortinet). \u0421\u0430\u043c\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 2022 \u0433\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 FortiOS, FortiProxy \u0438 FortiSwitchManager. \n\n\u041f\u0440\u043e \u044d\u0442\u0443 \u0443\u0442\u0435\u0447\u043a\u0443 \u0443\u0436\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u2014 \u043d\u043e \u043d\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c. \u0410 \u043c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, \u0441\u043b\u0438\u0442\u044b\u0439 \u0434\u0430\u043c\u043f \u043c\u043e\u0436\u0435\u0442 \u0434\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u0430\u0445. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0440\u0445\u0438\u0432\u0435 \u0443\u043f\u043e\u0440\u044f\u0434\u043e\u0447\u0435\u043d\u044b \u043f\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (TLD-TARGET_IP), \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430 \u0442\u0430\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0432\u0438\u0434\u0435.   \n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0437\u043d\u0430\u0442\u044c, \u0441\u0442\u0430\u043b\u0438 \u043b\u0438 \u0432\u044b (\u0438\u043b\u0438 \u0441\u0442\u0430\u043d\u0435\u0442\u0435) \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0443\u0442\u0435\u0447\u043a\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043b\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f:\n\n(1) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0435\u0441\u0442\u044c \u043b\u0438 \u0430\u0434\u0440\u0435\u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043d\u044b\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u0441\u043b\u0438\u0442\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0430\u0445 (\u0432\u0434\u0440\u0443\u0433 \u0432\u0430\u0448 \u0435\u043c\u0435\u0439\u043b \u0442\u0430\u043c \u0442\u043e\u0436\u0435 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0441\u044f).    \n  \n(2) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2022-40684 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.  \u042d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b FortiOS \u2014 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.2.0 \u0434\u043e 7.2.1, \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6; FortiProxy  \u2014  \u0432\u0435\u0440\u0441\u0438\u0438 7.2.0, \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6; FortiSwitchManager  \u2014  \u0432\u0435\u0440\u0441\u0438\u0438 7.2.0 \u0438 7.0.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 FortiOS 7.2.2 \u0438 \u0432\u044b\u0448\u0435, 7.0.7 \u0438 \u0432\u044b\u0448\u0435; FortiProxy 7.2.1 \u0438 \u0432\u044b\u0448\u0435, 7.0.7 \u0438 \u0432\u044b\u0448\u0435; FortiSwitchManager 7.2.1 \u0438 \u0432\u044b\u0448\u0435, 7.0.1 \u0438 \u0432\u044b\u0448\u0435. \n\n(3) \u0412\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043f\u043e\u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043b\u0438 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u201cUser=Local_Process_Access\u201d, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 'fortigate-tech-support' \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440-\u0430\u0434\u043c\u0438\u043d\u0430 (\u043e\u043d \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438,  \u0441\u043c. \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442). \n\n\u041d\u0443 \u0438 \u043a\u0441\u0442\u0430\u0442\u0438, \u0435\u0441\u043b\u0438 \u0432 \u0432\u0430\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043e\u0442 Fortinet \u043d\u0435 \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u0441\u043f\u0435\u0448\u0438\u0442\u0435 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f \u2013 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0443\u0447\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "creation_timestamp": "2026-08-05T00:00:28.213538Z"}, {"uuid": "96271ce8-9ecc-448a-917b-d565717b82e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12880", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4096*\nGithub: https://github.com/aminetitrofine/CVE-2022-4096", "creation_timestamp": "2026-07-31T00:00:09.065771Z"}, {"uuid": "69a7ddfb-58c0-4e97-b2fe-cba6044ce07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "Telegram/ndVGDiQeWW4WwWmn3hOoa_OwhRfnssnB56PgS_zLqwSd", "content": "", "creation_timestamp": "2022-10-29T00:54:01.000000Z"}, {"uuid": "b79316d9-427d-45c9-a9d5-23a1ddd938b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/information_security_channel/48719", "content": "PoC Published for Fortinet Vulnerability as Mass Exploitation Attempts Begin\nhttps://www.securityweek.com/poc-published-fortinet-vulnerability-mass-exploitation-attempts-begin\n\nDetails and a proof-of-concept (PoC) exploit have been published for the recent Fortinet vulnerability tracked as CVE-2022-40684, just as cybersecurity firms are seeing what appears to be the start of mass exploitation attempts.\nread more (https://www.securityweek.com/poc-published-fortinet-vulnerability-mass-exploitation-attempts-begin)", "creation_timestamp": "2022-10-14T12:13:42.000000Z"}, {"uuid": "b68167da-e3a5-442c-bc3b-e3fb6262285b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "exploited", "source": "https://t.me/thehackernews/3079", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\n\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html", "creation_timestamp": "2023-02-22T06:49:53.000000Z"}, {"uuid": "ae427403-b19d-4a2f-b8a2-42648c7ac860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/2666", "content": "Researchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\n\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html", "creation_timestamp": "2022-10-14T05:37:05.000000Z"}, {"uuid": "fbd8776a-d35e-4d8b-9bab-8b2201bdfafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/thehackernews/2649", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\n\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html", "creation_timestamp": "2022-10-07T18:59:08.000000Z"}, {"uuid": "dc9e4248-dbd6-4605-8c89-1195b8175e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/thehackernews/2811", "content": "Researchers have reported a new vulnerability (CVE-2022-4020) in Acer laptops that could be potentially weaponized to disable UEFI Secure Boot protection.\n\nRead: https://thehackernews.com/2022/11/new-flaw-in-acer-laptops-could-let.html", "creation_timestamp": "2022-11-29T17:40:28.000000Z"}, {"uuid": "05ab7a37-2128-4972-b0d7-52be65aaf828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-31T00:00:44.609333Z"}, {"uuid": "228730fe-7048-437b-8c24-33cf2b296587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/13063", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate, \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 FortiSwitch Manager. \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 9,6 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nhttps://xakep.ru/2022/10/14/cve-2022-40684-poc/", "creation_timestamp": "2022-10-14T12:43:31.000000Z"}, {"uuid": "22221694-92fc-40c9-b49e-eca8238caa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "exploited", "source": "https://t.me/xakep_ru/14494", "content": "\u0410\u0442\u0430\u043a\u0430 Downfall \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0445\u0438\u0449\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel\n\n\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0434\u043b\u044f \u0441\u0432\u0435\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Downfall (CVE-2022-40982), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nhttps://xakep.ru/2023/08/09/downfall/", "creation_timestamp": "2023-08-09T19:29:27.000000Z"}, {"uuid": "6baee2d3-c615-4da0-9d76-896957855d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2467", "content": "#CVE-2022\nA Shodan hunter for CVE-2022-40140 \n\nhttps://github.com/ipsBruno/CVE-2022-40140-SCANNER\n\n@BlueRedTeam", "creation_timestamp": "2022-11-16T11:11:16.000000Z"}, {"uuid": "96237d85-ec4e-4ddc-b703-86f43a9ceaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2393", "content": "#CVE-2022\n\nUtilities for exploiting vulnerability CVE-2022-40684 (FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface).\n\nhttps://github.com/und3sc0n0c1d0/CVE-2022-40684\n\n@BlueRedTeam", "creation_timestamp": "2022-10-25T17:41:31.000000Z"}, {"uuid": "e65e26ea-ea8c-45f2-96ec-59427275e4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2411", "content": "#CVE-2022\n\nExploit Fortigate - CVE-2022-40684\n\nhttps://github.com/gustavorobertux/gotigate\n\n@BlueRedTeam", "creation_timestamp": "2022-10-30T18:33:03.000000Z"}, {"uuid": "1511d45d-f5ec-42fe-b3ca-eb3689c47bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/6817", "content": "CVE-2022-40684\nhttps://github.com/secunnix/CVE-2022-40684", "creation_timestamp": "2022-10-28T11:17:52.000000Z"}, {"uuid": "d1a2df2a-a5c8-4633-9681-367ddeb4723e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40602", "type": "seen", "source": "https://t.me/anti_malware/14007", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0432 Twitter \u043a\u0430\u043a ReSolver, \u0432\u044b\u044f\u0432\u0438\u043b \u0436\u0451\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u043e\u0434\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 ZyXEL LTE3301-M209 LTE. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40602.", "creation_timestamp": "2022-12-26T16:50:21.000000Z"}, {"uuid": "4602c2a2-be3d-4fc2-8de4-7152e1467993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/6731", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096)\n\nhttps://medium.com/@basu-banakar/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2", "creation_timestamp": "2022-11-23T22:00:41.000000Z"}, {"uuid": "e20e8847-d43b-4cd0-b5f9-3c1e370cbee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/warmakerz/1188", "content": "\ud83d\udea8CVE-2022-40684: Proof of Concept of how an attacker can exploit a Fortinet device with public HTTPS management\n\n\u27a1\ufe0f\u27a1\ufe0f  @WarmakerZ  \u2b05\ufe0f\u2b05\ufe0f", "creation_timestamp": "2025-05-10T07:00:48.000000Z"}, {"uuid": "beea236d-77a3-4ec6-a582-2dac7900bf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/VulnerabilityNews/31287", "content": "The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application. This vulnerability may be triggered when running the the CLI tool directly, or when running a scan with one of the IDE plugins that invoke the Snyk CLI. Successful exploitation of this issue would likely require some level of social engineering - to coerce an untrusted project to be downloaded and analyzed via the Snyk CLI or opened in an IDE where a Snyk IDE plugin is installed and enabled. Additionally, if the IDE has a Trust feature then the target folder must be marked as \u00e2\u20ac\u02dctrusted\u00e2\u20ac\u2122 in order to be vulnerable. **NOTE:** This issue is independent of the one reported in [CVE-2022-40764](https://ift.tt/lS1KaVJ), and upgrading to a fixed version for this addresses that issue as well. The affected IDE plugins and versions are: - VS Code - Affected: <=1.8.0, Fixed: 1.9.0 - IntelliJ - Affected: <=2.4.47, Fixed: 2.4.48 - Visual Studio - Affected: <=1.1.30, Fixed: 1.1.31 - Eclipse - Affected: <=v20221115.132308, Fixed: All subsequent versions - Language Server - Affected: <=v20221109.114426, Fixed: All subsequent versions\nPublished at: November 30, 2022 at 02:15PM\nView on website", "creation_timestamp": "2022-11-30T16:57:57.000000Z"}, {"uuid": "b165bbd7-62f6-4835-8024-21fbf1b44a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/VulnerabilityNews/31288", "content": "The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin before 5.6.5; the package @snyk/snyk-hex-plugin before 1.1.6 are vulnerable to Command Injection due to an incomplete fix for [CVE-2022-40764](https://ift.tt/lS1KaVJ). A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the snyk test command on untrusted files. In most cases, an attacker positioned to control the command line arguments to the Snyk CLI would already be positioned to execute arbitrary commands. However, this could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline. This issue has been addressed in the latest Snyk Docker images available at https://ift.tt/ksWSvXu as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605.\nPublished at: November 30, 2022 at 02:15PM\nView on website", "creation_timestamp": "2022-11-30T16:57:58.000000Z"}, {"uuid": "46a484bd-d844-4fc4-8811-f74f551142cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "exploited", "source": "https://t.me/Russian_OSINT/2908", "content": "\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u044c\u0432\u0438\u043d\u0443\u044e \u0434\u043e\u043b\u044e \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Google \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u041c\u043e\u0433\u0438\u043c\u0438 \u0438 \u043d\u0430\u0437\u0432\u0430\u043b \u0435\u0435 Downfall. \n\n\u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440, \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u0445.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0435 \u0438\u0437 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 Downfall \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0440\u0435\u043a\u0432\u0438\u0437\u0438\u0442\u044b, \u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\u0411\u0430\u0433 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-40982. \u041f\u043e\u0447\u0435\u043c\u0443 2022? \u0414\u0430 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e Intel \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0435\u0449\u0435 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430, \u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u044b\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043d\u043e \u0441 \u043f\u043e\u0442\u0435\u0440\u0435\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Intel \u043e\u0442 Skylake \u0434\u043e Ice Lake.\n\n\u041f\u043e \u0435\u0433\u043e \u0441\u043b\u043e\u0432\u0430\u043c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0432 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445, \u0442\u0430\u043a \u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nIntel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u043e 50 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043e\u0432. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u041f\u041a \u0438\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel Core \u043e\u0442 6-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u00abSkylake\u00bb \u0434\u043e 11-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u00abTiger Lake\u00bb, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2015 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d Skylake.\n\n\u041f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel Xeon \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438 \u0438\u0437-\u0437\u0430 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442.", "creation_timestamp": "2023-08-11T07:16:05.000000Z"}, {"uuid": "b202665b-ecb7-4431-909e-6ad9699586de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40635", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1632", "content": "https://github.com/mbadanoiu/CVE-2022-40635\n\n#github", "creation_timestamp": "2023-12-02T07:54:50.000000Z"}, {"uuid": "07b523cb-846b-4166-875f-a7c3473a0399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/legendscrewmy/2475", "content": "\u200b\u200bNimbo-C2\n\nNimbo-C2 is yet another (simple and lightweight) C2 framework.\n\nNimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.\n\nAll server components are written in Python:\n\n\u25ab\ufe0f HTTP listener that manages the agents.\n\u25ab\ufe0f Builder that generates the agent payloads.\n\u25ab\ufe0f Nimbo-C2 is the interactive C2 component that rule'em all!\n\nI developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community \ud83d\udcaa.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n\u200b\u200b\ud835\udc0e\ud835\udc12\ud835\udc02\ud835\udc0f \ud835\udc0f\ud835\udc2b\ud835\udc1e-\ud835\udc0f\ud835\udc2b\ud835\udc1e\ud835\udc29\ud835\udc1a\ud835\udc2b\ud835\udc1a\ud835\udc2d\ud835\udc22\ud835\udc28\ud835\udc27 \ud835\udc0f\ud835\udc25\ud835\udc1a\ud835\udc27 \ud835\udc1a\ud835\udc27\ud835\udc1d \ud835\udc0d\ud835\udc28\ud835\udc2d\ud835\udc1e\ud835\udc2c\n\nhttps://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes\n\n\u200b\u200bHeap-Overflow-Detection\n\nA unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.\n\nhttps://github.com/SoftwareSecurityLab/Heap-Overflow-Detection\n\n\u200b\u200bMalware-IOCs\n\nThis is where I'll post IOCs from malware investigations\n\nhttps://github.com/executemalware/Malware-IOCs\n\nJanus\n\nJanus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.\n\nhttps://github.com/echtdefault/Janus\n\n\u200b\u200bAWSome Pentesting Cheatsheet\n\n\u25ab\ufe0f This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.\n\u25ab\ufe0f It was created with my notes gathered with uncontable hours of study and annotations from various places\n\u25ab\ufe0f It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)\n\nhttps://github.com/pop3ret/AWSome-Pentesting\n\nJava android magisk burp objection root emulator easy (Jamboee)\n\nWant to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:\n\n\u25ab\ufe0f Making it portable as possible\n\u25ab\ufe0f Setting up and downloading extremely fast environment for Android, Java and Python\n\u25ab\ufe0f Converting ssl certs to Android without openssl using certutil.exe only\n\nhttps://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy\n\n\u200b\u200bCipherScan\n\nCipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.\n\nCipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.\n\nhttps://github.com/mozilla/cipherscan\n\n\u200b\u200bFortinet RCE (CVE-2022-40684)\n\nFortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.\n\nhttps://github.com/horizon3ai/CVE-2022-40684\n\nResearch:\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/\n\n\u200b\u200b3/5", "creation_timestamp": "2022-12-11T18:17:32.000000Z"}, {"uuid": "43ff6901-bfda-444c-a815-8f2b2d9d54e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/legendscrewmy/2476", "content": "WPRecon (Wordpress Recon)\n\nWPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.\n\nWe can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).\n\nThe purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.\n\nhttps://github.com/AngraTeam/wprecon\n\n\u200b\u200bNuclei template CVE-2022-40684\n\nhttps://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml\n\n#cve\n\n\u200b\u200bChopper payload smuggling\n\nPorted the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName \ud83d\udc47\n\nThe tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.\n\nhttps://github.com/0xsp-SRD/0xsp.com/tree/main/chopper\n\nDetails:\nhttps://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1\n\n\u200b\u200bCVE-2021-45067\n\nThis bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.\n\nhttps://github.com/hacksysteam/CVE-2021-45067\n\n#cve\n\n\u200b\u200bOpenBackdoor\n\nOpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.\n\nhttps://github.com/thunlp/OpenBackdoor\n\n\u200b\u200bSharpAgent\n\nC# havoc implant\n\nA .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.\n\nJust modify the handler to your teamserver. Also it's probably really buggy right now.\n\nhttps://github.com/susMdT/SharpAgent/\n\n\u200b\u200bPsyloDbg\n\nPsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:\n\n\u25ab\ufe0f Exception\n\u25ab\ufe0f Create Thread\n\u25ab\ufe0f Create Process\n\u25ab\ufe0f Exit Thread\n\u25ab\ufe0f Exit Process\n\u25ab\ufe0f Load DLL\n\u25ab\ufe0f Unload DLL\n\u25ab\ufe0f Debug String\n\u25ab\ufe0f RIP\n\nhttps://github.com/DarkCoderSc/PsyloDbg\n\n\u200b\u200bmatano\n\nMatano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.\n\nhttps://github.com/matanolabs/matano\n\n\u200b\u200bRedEye\n\nRedEye is an open-source analytic tool developed by CISA and DOE\u2019s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment. \n\nThe tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye\u2019s presentation mode to present findings and workflow to stakeholders.\n\nhttps://github.com/cisagov/RedEye\n\n\u200b\u200bLocksmith\n\nA tool to identify and remediate common misconfigurations in Active Directory Certificate Services\n\nhttps://github.com/TrimarcJake/Locksmith\n\n\u200b\u200bosintui\n\nOpen Source Intelligence Terminal User Interface\n\nhttps://github.com/wssheldon/osintui\n\n#OSINT\n\n\u200b\u200bGhauri\n\nAn advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws\n\nhttps://github.com/r0oth3x49/ghauri\n\n\u200b\u200bThe Soaring Eagle C2\n\nI developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion. \n\nhttps://github.com/ItsCyberAli/The-Soaring-Eagle\n\n\u200b\u200b4/5", "creation_timestamp": "2022-12-11T18:17:32.000000Z"}, {"uuid": "80d4f1a5-b2ff-4a29-8877-15aaf3ac7530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40286", "type": "seen", "source": "https://t.me/S_E_Reborn/5335", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432: \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0435\u0436\u0435\u043d\u0438\u044f, \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u0433\u0440\u0443\u0448\u043a\u0438. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0432\u043e\u0435\u043c \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0440\u0430\u0431\u043e\u0442\u0430\u044f \u043e\u0442 \u043b\u0438\u0446\u0430 NT AUTHORITY\\SYSTEM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u044e, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0435\u0442 \u043d\u0430\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u0435\u043a\u0442\u043e\u0440 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u0415\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u041f\u041e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435:\n# \u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u0440\u0435\u0435\u0441\u0442\u0440\u0430\nGet-ChildItem \"HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" | Get-ItemProperty | Where-Object {$_.DisplayName -ne $null} | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate\n\n# wmi\nwmic product get name,version,vendor  \n\n# Seatbelt\n.\\SeatBelt.exe InstalledProducts\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0438\u0441\u043e\u0447\u043a\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432\u0437\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u0430\u0447\u043a\u0435. \u041e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u043d\u0443\u0436\u043d\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Exploit-Street, \u043d\u043e \u044f \u0447\u0442\u043e-\u0442\u043e \u043d\u0435 \u043c\u043e\u0433\u0443 \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u0442\u044c \u043a\u0430\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u0438\u0434\u0435\u0438?\n\nManageEngine ServiceDesk\n- https://github.com/horizon3ai/CVE-2021-44077\n\nManageEngine ADSelfService\n- https://github.com/synacktiv/CVE-2021-40539\n- CVE-2022-47966\n- CVE-XXXX-XXXX (\u0441 \u0432\u0435\u0440\u0441\u0438\u0438 ADSelfService Plus 4.2.9, 2012 \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.3 Build 6301)\n\nUserManager\n- CVE-2023-36047\n\nITunes\n- CVE-2024-44193\n\nRazer ( \u0434\u043e 3.7.1209.121307)\n- RazerEoP\n\nDatacard XPS Card Printer Driver \n- CVE-2024-34329\n\nAppGate\n- CVE-2019-19793\n\nSeagate\n- CVE-2022-40286\n\nAWS VPN Client\n- CVE-2022-25165\n\nAIDA (\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 7.00.6742)\n- AIDA64DRIVER-EOP\n\nVboxSDS\n- CVE-2024-21111\n\nTeamViewer\n- CVE-2024-7479 CVE-2024-7481\n\nGamingService \u043e\u0442 XBOX\n- GamingServiceEoP\n- GamingServiceEoP5\n\nChrome Updater\n- CVE-2023-7261\n\nPlantronics Desktop Hub\n- CVE-2024-27460", "creation_timestamp": "2024-12-26T13:38:29.000000Z"}, {"uuid": "dac5e563-d6b8-4b15-b133-38179a919889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40635", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/9503", "content": "#exploit\n1. CVE-2022-40635:\nGroovy Sandbox Bypass in CrafterCMS\nhttps://github.com/mbadanoiu/CVE-2022-40635\n\n2. CVE-2023-26049:\nCookie Bugs - Smuggling & Injection\nhttps://blog.ankursundara.com/cookie-bugs\n\n3. CVE-2023-47503:\nJfinal_ CMS V5.1.0 has login.jsp written to RCE\nhttps://github.com/jflyfox/jfinal_cms/issues/58", "creation_timestamp": "2024-03-20T05:07:42.000000Z"}, {"uuid": "95cd6b66-052d-47f3-8cc0-9aa9e39dd78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7200", "content": "#exploit\n1. CVE-2022-40127:\nApache Airflow <2.4.0 DAG example_bash_operator RCE\nhttps://github.com/Mr-xn/CVE-2022-40127\n\n2. Chromium V8 Engine Exploits\nhttps://github.com/anvbis/chrome.v8.n-days", "creation_timestamp": "2022-11-19T13:07:01.000000Z"}, {"uuid": "85cec25c-c133-405f-8aca-3bb2d9bbba38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40308", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7426", "content": "#exploit\n1. CVE-2022-40309, CVE-2022-40308:\nApache Archiva <2.2.9 - Arbitrary Directory Delete / Arbitrary File Read\nhttps://xz.aliyun.com/t/11979\n\n2. CVE-2022-40602:\nZyXEL LTE3301-M209 - \"Backdoor\" credentials\nhttps://resolverblog.blogspot.com/2022/12/cve-2022-40602-zyxel-lte3301-m209.html\n]-> D-Link DWR-921/925/118 Hardcoded backdoor implemented by vendor:\nhttps://resolverblog.blogspot.com/2022/12/d-link-dwr-921-dwr-925-dwr-118.html\n\n3. DirtyCred Remastered: how to turn an UAF into Privilege Escalation\nhttps://exploiter.dev/blog/2022/CVE-2022-2602.html", "creation_timestamp": "2024-10-10T19:09:53.000000Z"}, {"uuid": "158fcf79-761c-4c7a-894d-c53587f9906f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40602", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7426", "content": "#exploit\n1. CVE-2022-40309, CVE-2022-40308:\nApache Archiva <2.2.9 - Arbitrary Directory Delete / Arbitrary File Read\nhttps://xz.aliyun.com/t/11979\n\n2. CVE-2022-40602:\nZyXEL LTE3301-M209 - \"Backdoor\" credentials\nhttps://resolverblog.blogspot.com/2022/12/cve-2022-40602-zyxel-lte3301-m209.html\n]-> D-Link DWR-921/925/118 Hardcoded backdoor implemented by vendor:\nhttps://resolverblog.blogspot.com/2022/12/d-link-dwr-921-dwr-925-dwr-118.html\n\n3. DirtyCred Remastered: how to turn an UAF into Privilege Escalation\nhttps://exploiter.dev/blog/2022/CVE-2022-2602.html", "creation_timestamp": "2024-10-10T19:09:53.000000Z"}, {"uuid": "b4409be8-b612-4bcc-a5f4-44952954029e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40309", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7426", "content": "#exploit\n1. CVE-2022-40309, CVE-2022-40308:\nApache Archiva <2.2.9 - Arbitrary Directory Delete / Arbitrary File Read\nhttps://xz.aliyun.com/t/11979\n\n2. CVE-2022-40602:\nZyXEL LTE3301-M209 - \"Backdoor\" credentials\nhttps://resolverblog.blogspot.com/2022/12/cve-2022-40602-zyxel-lte3301-m209.html\n]-> D-Link DWR-921/925/118 Hardcoded backdoor implemented by vendor:\nhttps://resolverblog.blogspot.com/2022/12/d-link-dwr-921-dwr-925-dwr-118.html\n\n3. DirtyCred Remastered: how to turn an UAF into Privilege Escalation\nhttps://exploiter.dev/blog/2022/CVE-2022-2602.html", "creation_timestamp": "2024-10-10T19:09:53.000000Z"}, {"uuid": "8a9674d7-7a8e-4376-986d-c73028d6722f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40297", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6771", "content": "#exploit\n1. CVE-2022-32792:\nWebKit B3ReduceStrength Out-of-Bounds Write\nhttps://starlabs.sg/blog/2022/09-step-by-step-walkthrough-of-cve-2022-32792\n\n2. CVE-2022-31188:\nOpenCV CVAT SSRF\nhttps://github.com/emirpolatt/CVE-2022-31188\n\n3. CVE-2022-40297:\nPrivilage escalation in Ubuntu Touch 16.04 - by PIN Bruteforce\nhttps://github.com/filipkarc/PoC-ubuntutouch-pin-privesc", "creation_timestamp": "2022-09-10T13:17:01.000000Z"}, {"uuid": "d407a825-b065-4184-9bd4-b1709b475f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40799*\nGithub: https://github.com/rtfmkiesel/CVE-2022-40799", "creation_timestamp": "2026-07-31T04:00:04.047620Z"}, {"uuid": "0b4b1eb0-b2ae-49b7-85c2-0e92775cc1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40010", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8556", "content": "#exploit\n1. CVE-2022-40010:\nTenda AC6 AC1200 15.03.06.5 - Cross Site Scripting\nhttps://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html\n\n2. CVE-2023-33140:\nMS OneNote 2305 Build 16.0.16501.20074 - Spoofing\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/2023/CVE-2023-33140\n]-> https://www.nu11secur1ty.com/2023/06/cve-2023-33140.html", "creation_timestamp": "2023-06-26T10:59:01.000000Z"}, {"uuid": "65f14e00-e69a-465c-a188-69d6103cf604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6952", "content": "#exploit\n1. CVE-2022-41040:\nSSRF in Microsoft Exchange Server\nhttps://github.com/kljunowsky/CVE-2022-41040-POC\n]-> https://github.com/TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\nhttps://github.com/horizon3ai/CVE-2022-40684", "creation_timestamp": "2025-01-17T05:54:36.000000Z"}, {"uuid": "a7784e3b-62d6-4f79-963e-1f26a1b84d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40286", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6840", "content": "#exploit\nExploiting a Seagate service to create a SYSTEM shell (CVE-2022-40286)\nhttps://www.x86matthew.com/view_post?id=windows_seagate_lpe", "creation_timestamp": "2022-09-21T11:03:01.000000Z"}, {"uuid": "f03227b2-f10c-4332-8a6f-efa70e6b632b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7141", "content": "#exploit\n1. CVE-2021-44707:\nAdobe Reader Out-of-bounds Write Vulnerability Analysis and Exploitation\nhttps://mp.weixin.qq.com/s/elLI4YvJ0u9yYoyQpsv1og\n\n2. CVE-2022-3699:\nLenovo Diagnostics Driver EoP - Arbitrary R/W\nhttps://github.com/alfarom256/CVE-2022-3699\n\n3. CVE-2022-40303:\nInteger overflow in xmlParseNameComplex\nhttps://gitlab.gnome.org/GNOME/libxml2/-/issues/381", "creation_timestamp": "2022-11-10T20:37:43.000000Z"}, {"uuid": "7d68fb40-475c-4e02-91d0-6567155593d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6904", "content": "#exploit\n1. CVE-2022-40140, CVE-2022-41082:\n\"ProxyNotShell\"\nhttps://github.com/LivingFree8/CVE-2022-41082-RCE-POC\n\n2. CVE-2022-30600:\nMoodle Failed Login\nhttps://github.com/Boonjune/POC-CVE-2022-30600\n\n3. A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W\nhttps://github.com/SecIdiot/ANGRYORCHARD", "creation_timestamp": "2022-12-21T04:56:56.000000Z"}, {"uuid": "12561243-97ad-42e5-9910-314be7e9482a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7012", "content": "#Threat_Research\n1. A New Attack Surface on MS Exchange - ProxyRelay!\nhttps://blog.orange.tw/2022/10/proxyrelay-a-new-attack-surface-on-ms-exchange-part-4.html\n2. How Scanning Your Projects for Security Issues Can Lead to RCE (CVE-2022-40764)\nhttps://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution", "creation_timestamp": "2022-10-20T11:05:16.000000Z"}, {"uuid": "6053640f-6fc6-4d31-8549-2f6364f16f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7094", "content": "#exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739", "creation_timestamp": "2022-11-03T11:05:13.000000Z"}, {"uuid": "26d046e1-903d-4e7e-9de5-908e4c2a28ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40635", "type": "seen", "source": "https://t.me/Rootsec_2/2174", "content": "#exploit\n1. CVE-2022-40635:\nGroovy Sandbox Bypass in CrafterCMS\nhttps://github.com/mbadanoiu/CVE-2022-40635\n\n2. CVE-2023-26049:\nCookie Bugs - Smuggling & Injection\nhttps://blog.ankursundara.com/cookie-bugs", "creation_timestamp": "2024-08-16T08:55:30.000000Z"}, {"uuid": "b8f1824e-7178-4215-b2ba-4338e232a1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/club31337/3227", "content": "Belsen Group leaked 15k+ FortiGate VPN accounts including configuration files and VPN passwords likely obtained via exploitation of CVE-2022-40684 impacting FortiGate 7.x and 7.2.x devices.\n\nAlthough unconfirmed, it is likely that this threat group has been operating privately since 2022, given the age of the data and the nature of the vulnerability, and is only now sharing this data publicly.\n\nFor research purposes a GitHub repository was created including all affected IPs. \n\nWe do not recommend using the original download link:\n\nbelsenacdodoy3nsmmyjfmtgjen6ipaqkti7dm2q57vabjx2vzq6tnad.onion/files/FortiGate.zip\n\n\ud83d\udcbe It feels like you\u2019re back in 200x downloading data using GPRS on a Windows 98 machine \ud83e\udd26\ud83c\udffc\u200d\u2640\ufe0f\n\nDownload:\nhttps://mega.nz/file/wDhQEC5Y#OctAHTwgv57eRbEc3nvPRb53aX5vxXFIW1HopceZXUI\n\n@club31337", "creation_timestamp": "2025-01-22T05:44:48.000000Z"}, {"uuid": "9a9c3561-c4f1-42a1-9395-6f22fb7eb7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:03.737834Z"}, {"uuid": "59a47f44-8daf-4791-937b-050b8aaff2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:15:10.603562Z"}, {"uuid": "3dda2fb9-008d-4ac1-a79a-33fb6892fc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2878", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40916\nGithub: https://github.com/whitej3rry/CVE-2022-40916\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:19.611707Z"}, {"uuid": "53c4487b-df20-4c17-a491-506e7b80272c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "5e719ad9-38ab-433b-a537-02191db7fd5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "cbd8ee2d-c4f4-490e-a0be-4eaaec866425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40317", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2402", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40317\nGithub: https://github.com/izdiwho/CVE-2022-40317\nDescribe: \nOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.", "creation_timestamp": "2026-08-02T00:01:18.386619Z"}, {"uuid": "e6e1233c-51f1-41d8-b0f9-559d15163daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3292", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40684\nGithub: https://github.com/dickson0day/CVE-2022-40684\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:20.638225Z"}, {"uuid": "773f339c-5ef6-4446-84f0-5e481975edea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3434", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40471\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40471\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:20.839083Z"}, {"uuid": "29e5ea67-ad98-4f33-9243-47bedbb58ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40126", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2917", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40126\nGithub: https://github.com/LovelyWei/CVE-2022-40126\nDescribe: \nA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.", "creation_timestamp": "2026-08-02T00:01:19.775108Z"}, {"uuid": "bdc8ffbe-4538-4e8b-b423-293ef6c75867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2880", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40490\nGithub: https://github.com/whitej3rry/CVE-2022-40490\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:19.823955Z"}, {"uuid": "d04bb6b7-3887-46d5-855c-c0af59f47b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3717", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40674\nGithub: https://github.com/nidhi7598/-expat_2.1.0_CVE-2022-40674\nDescribe: \nlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.", "creation_timestamp": "2026-08-02T00:01:21.719128Z"}, {"uuid": "f4e3d762-8203-4176-a612-aaf942f402a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3582", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40664\nGithub: https://github.com/Jackey0/CVE-2022-40664\nDescribe: \nApache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.", "creation_timestamp": "2026-08-02T00:01:21.299036Z"}, {"uuid": "b6e7b64f-8c81-4250-bd9f-04b1a2a0a357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3499", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40648\nGithub: https://github.com/b3wT/CVE-2022-40648-MASS\nDescribe: \nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.", "creation_timestamp": "2026-08-02T00:01:21.199564Z"}, {"uuid": "60061dbe-3ffc-4587-85d3-3181c38c9355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/purpleshift/77", "content": "\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0440\u0445\u0438\u0432 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate (\u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Fortinet). \u0421\u0430\u043c\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 2022 \u0433\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 FortiOS, FortiProxy \u0438 FortiSwitchManager. \n\n\u041f\u0440\u043e \u044d\u0442\u0443 \u0443\u0442\u0435\u0447\u043a\u0443 \u0443\u0436\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u2014 \u043d\u043e \u043d\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c. \u0410 \u043c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, \u0441\u043b\u0438\u0442\u044b\u0439 \u0434\u0430\u043c\u043f \u043c\u043e\u0436\u0435\u0442 \u0434\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u0430\u0445. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0440\u0445\u0438\u0432\u0435 \u0443\u043f\u043e\u0440\u044f\u0434\u043e\u0447\u0435\u043d\u044b \u043f\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (TLD-TARGET_IP), \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430 \u0442\u0430\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0432\u0438\u0434\u0435.   \n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0437\u043d\u0430\u0442\u044c, \u0441\u0442\u0430\u043b\u0438 \u043b\u0438 \u0432\u044b (\u0438\u043b\u0438 \u0441\u0442\u0430\u043d\u0435\u0442\u0435) \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0443\u0442\u0435\u0447\u043a\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043b\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f:\n\n(1) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0435\u0441\u0442\u044c \u043b\u0438 \u0430\u0434\u0440\u0435\u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043d\u044b\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u0441\u043b\u0438\u0442\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0430\u0445 (\u0432\u0434\u0440\u0443\u0433 \u0432\u0430\u0448 \u0435\u043c\u0435\u0439\u043b \u0442\u0430\u043c \u0442\u043e\u0436\u0435 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0441\u044f).    \n  \n(2) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2022-40684 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.  \u042d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b FortiOS \u2014 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.2.0 \u0434\u043e 7.2.1, \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6; FortiProxy  \u2014  \u0432\u0435\u0440\u0441\u0438\u0438 7.2.0, \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6; FortiSwitchManager  \u2014  \u0432\u0435\u0440\u0441\u0438\u0438 7.2.0 \u0438 7.0.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 FortiOS 7.2.2 \u0438 \u0432\u044b\u0448\u0435, 7.0.7 \u0438 \u0432\u044b\u0448\u0435; FortiProxy 7.2.1 \u0438 \u0432\u044b\u0448\u0435, 7.0.7 \u0438 \u0432\u044b\u0448\u0435; FortiSwitchManager 7.2.1 \u0438 \u0432\u044b\u0448\u0435, 7.0.1 \u0438 \u0432\u044b\u0448\u0435. \n\n(3) \u0412\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043f\u043e\u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043b\u0438 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u201cUser=Local_Process_Access\u201d, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 'fortigate-tech-support' \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440-\u0430\u0434\u043c\u0438\u043d\u0430 (\u043e\u043d \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438,  \u0441\u043c. \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442). \n\n\u041d\u0443 \u0438 \u043a\u0441\u0442\u0430\u0442\u0438, \u0435\u0441\u043b\u0438 \u0432 \u0432\u0430\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043e\u0442 Fortinet \u043d\u0435 \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u0441\u043f\u0435\u0448\u0438\u0442\u0435 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f \u2013 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0443\u0447\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "creation_timestamp": "2026-08-04T13:00:05.097905Z"}, {"uuid": "57b344be-ed16-44b2-b303-c7a6f324c720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "content": "", "creation_timestamp": "2026-05-06T00:00:00.000000Z"}, {"uuid": "31088bc6-246b-49d7-bf75-ba752065ce7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6175", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40881*\nGithub: https://github.com/yilin1203/CVE-2022-40881", "creation_timestamp": "2026-07-31T19:00:03.947774Z"}, {"uuid": "8b74af40-7c5b-496e-b508-2f78b263cea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6509", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40684*\nGithub: https://github.com/z-bool/CVE-2022-40684", "creation_timestamp": "2026-07-31T19:00:04.287096Z"}, {"uuid": "46104c42-034a-45c0-8439-1f76e497eece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cisoclub/1965", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f WithSecure, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0444\u0435\u0440\u0435 \ud83d\udd10\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcddMicrosoft Office.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83d\udd16\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration Suite (ZCS) \u0443\u0436\u0435 \ud83d\udd11\u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\n3\ufe0f\u20e3 \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-40684, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \ud83d\udd12\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate, \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \ud83d\udccaFortiSwitch Manager. \n\n4\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435\u2755 80 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 vCenter Server \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.0 \u0432\u0441\u0451 \u0435\u0449\u0451 \ud83e\udd37\ud83c\udffc\u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \ud83d\udcc8\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbZoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 macOS \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \ud83d\uddd2\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2022-28762 \u0432 \u041f\u041e.\n\n7\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \ud83c\udf0eChrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u0438 Aruba Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.", "creation_timestamp": "2026-08-03T21:00:03.682465Z"}, {"uuid": "8382ebe7-1ddf-4d48-90be-e2f88f0b14b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-31T21:00:04.213993Z"}, {"uuid": "5a175ef2-4570-4710-a759-8aaf658f41ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4068", "type": "seen", "source": "https://t.me/purp_sec/192", "content": "\u041f\u043e\u0445\u043e\u0436\u0435, \u0443 Fortinet \u043d\u0430\u0447\u0430\u043b\u043e \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u043e\u0441\u044c, \u043a\u0430\u043a \u0438 \u0443 Apple.\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043f\u0443\u0433\u043d\u0443\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u2014 \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate. \u041d\u043e \u0442\u043e\u0433\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-4068), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0435\u0449\u0435 \u0432 2022 \u0433\u043e\u0434\u0443. \u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0435.\n\n#blue_team", "creation_timestamp": "2026-08-04T13:00:15.086993Z"}, {"uuid": "aa06757a-9322-4450-a915-505c6394c1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/purp_sec/162", "content": "\ud83d\udea8 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate\n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0433\u0440\u043e\u043c\u043a\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u0435\u0431\u0435 \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438\u043b\u0438 \u043a\u0430\u043d\u0430\u043b\u0430. Fortigate \u0435\u0449\u0435 \u0442\u043e\u0433\u0434\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS 7.2.2. \u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b.\n\nBelsen Group, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u0431\u044b\u0442\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0435\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0412 \u0441\u043b\u0438\u0442\u044b\u0445 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 (\u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430), \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u043b\u0438 \u0432\u0430\u0441 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Fortigate #\u0443\u0442\u0435\u0447\u043a\u0438", "creation_timestamp": "2026-08-04T13:00:15.515958Z"}, {"uuid": "ba509788-fe7e-4774-94ca-87f8d351bcf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4716", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40140\nGithub: https://github.com/ipsBruno/CVE-2022-40140-SCANNER\nDescribe: \nAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.", "creation_timestamp": "2026-07-31T22:00:03.898720Z"}, {"uuid": "4379e17a-a84f-4342-b0b4-8080f1ae562b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4275", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40146\nGithub: https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar\nDescribe: \nServer-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.", "creation_timestamp": "2026-07-31T23:00:04.132196Z"}, {"uuid": "33972569-da22-4ff0-9ce3-e7aa7312f9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6509", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40684*\nGithub: https://github.com/z-bool/CVE-2022-40684", "creation_timestamp": "2026-08-01T00:00:25.364968Z"}, {"uuid": "16b894bc-e5fd-4b51-a5f8-5e559afcd39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40687", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4105", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40687\nGithub: https://github.com/williamkhepri/CVE-2022-40687-metasploit-scanner\nDescribe: \n**", "creation_timestamp": "2026-08-01T00:00:09.761167Z"}, {"uuid": "37ec090c-f55f-44dc-853a-daffdd580200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40470", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4284", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40470\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40470\nDescribe: \n**", "creation_timestamp": "2026-08-01T00:00:10.410863Z"}, {"uuid": "d27167d8-eaf9-4d56-9641-541d70e70fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4275", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40146\nGithub: https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar\nDescribe: \nServer-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.", "creation_timestamp": "2026-08-01T00:00:10.453652Z"}, {"uuid": "075645c8-f4a5-40f5-b570-747fc0eebe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4716", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40140\nGithub: https://github.com/ipsBruno/CVE-2022-40140-SCANNER\nDescribe: \nAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.", "creation_timestamp": "2026-08-01T00:00:12.225920Z"}, {"uuid": "3640f12f-c49c-4e8b-bd2b-fbab2354807c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-08-01T00:00:12.645475Z"}, {"uuid": "a1ee5339-5682-48e5-a7c4-542ca5085cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6175", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40881*\nGithub: https://github.com/yilin1203/CVE-2022-40881", "creation_timestamp": "2026-08-01T00:00:25.105679Z"}, {"uuid": "d330d043-584c-42c3-9641-dbdb7c5cb9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40799*\nGithub: https://github.com/rtfmkiesel/CVE-2022-40799", "creation_timestamp": "2026-08-01T00:00:42.641384Z"}, {"uuid": "7a8e7e96-68a0-4e21-847d-13c6aac2a241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3582", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40664\nGithub: https://github.com/Jackey0/CVE-2022-40664\nDescribe: \nApache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.", "creation_timestamp": "2026-08-01T01:00:05.156927Z"}, {"uuid": "4bc000da-0792-47cd-98bd-5b4404f9a7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3499", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40648\nGithub: https://github.com/b3wT/CVE-2022-40648-MASS\nDescribe: \nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.", "creation_timestamp": "2026-08-01T01:00:05.061606Z"}, {"uuid": "98ac569e-ecb9-4d16-80db-446639e5e6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3717", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40674\nGithub: https://github.com/nidhi7598/-expat_2.1.0_CVE-2022-40674\nDescribe: \nlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.", "creation_timestamp": "2026-08-01T01:00:05.572051Z"}, {"uuid": "5d29de6d-bf56-4a1e-b1cf-d4fe0d7db220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cisoclub/1965", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f WithSecure, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0444\u0435\u0440\u0435 \ud83d\udd10\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcddMicrosoft Office.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83d\udd16\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration Suite (ZCS) \u0443\u0436\u0435 \ud83d\udd11\u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\n3\ufe0f\u20e3 \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-40684, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \ud83d\udd12\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate, \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \ud83d\udccaFortiSwitch Manager. \n\n4\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435\u2755 80 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 vCenter Server \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.0 \u0432\u0441\u0451 \u0435\u0449\u0451 \ud83e\udd37\ud83c\udffc\u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \ud83d\udcc8\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbZoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 macOS \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \ud83d\uddd2\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2022-28762 \u0432 \u041f\u041e.\n\n7\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \ud83c\udf0eChrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u0438 Aruba Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.", "creation_timestamp": "2026-08-04T00:00:12.691043Z"}, {"uuid": "1d2dbca7-30c1-4614-8d4a-f696ee1544e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40126", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2917", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40126\nGithub: https://github.com/LovelyWei/CVE-2022-40126\nDescribe: \nA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.", "creation_timestamp": "2026-08-01T02:00:04.033963Z"}, {"uuid": "3cb4e5b2-31a0-42df-a378-2a6f37520c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2880", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40490\nGithub: https://github.com/whitej3rry/CVE-2022-40490\nDescribe: \n**", "creation_timestamp": "2026-08-01T02:00:04.077419Z"}, {"uuid": "40679bab-00ee-4fc8-8c67-167dd3c80b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3292", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40684\nGithub: https://github.com/dickson0day/CVE-2022-40684\nDescribe: \n**", "creation_timestamp": "2026-08-01T02:00:04.894593Z"}, {"uuid": "a3b66def-62db-43b0-886e-82628f8a74c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3434", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40471\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40471\nDescribe: \n**", "creation_timestamp": "2026-08-01T02:00:05.089873Z"}, {"uuid": "5ec1193e-d5ad-4e5b-8e62-2854d44f9e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-14)", "content": "", "creation_timestamp": "2026-05-14T00:00:00.000000Z"}, {"uuid": "354111c3-7375-406f-9246-314769831fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2878", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40916\nGithub: https://github.com/whitej3rry/CVE-2022-40916\nDescribe: \n**", "creation_timestamp": "2026-08-01T03:00:04.356603Z"}, {"uuid": "d6bc9cfb-5b52-4b40-80d6-ac05411728ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "c87d8932-9480-40b7-83bf-db2962abbdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40317", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2402", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40317\nGithub: https://github.com/izdiwho/CVE-2022-40317\nDescribe: \nOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.", "creation_timestamp": "2026-08-01T04:00:05.143696Z"}, {"uuid": "12447067-7676-419e-b2c3-3eda09698604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-04T13:00:23.848326Z"}, {"uuid": "623f1e11-8d1c-419c-b31e-f4ba2642bff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "content": "", "creation_timestamp": "2026-05-19T00:00:00.000000Z"}, {"uuid": "e9f9775f-34e4-49b2-812b-3838cc6cfb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/purp_sec/162", "content": "\ud83d\udea8 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate\n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0433\u0440\u043e\u043c\u043a\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u0435\u0431\u0435 \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438\u043b\u0438 \u043a\u0430\u043d\u0430\u043b\u0430. Fortigate \u0435\u0449\u0435 \u0442\u043e\u0433\u0434\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS 7.2.2. \u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b.\n\nBelsen Group, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u0431\u044b\u0442\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0435\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0412 \u0441\u043b\u0438\u0442\u044b\u0445 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 (\u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430), \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u043b\u0438 \u0432\u0430\u0441 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Fortigate #\u0443\u0442\u0435\u0447\u043a\u0438", "creation_timestamp": "2026-08-05T00:00:06.966424Z"}, {"uuid": "0d56ceab-b71c-4b18-81ea-f1867998fd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "content": "", "creation_timestamp": "2026-05-20T00:00:00.000000Z"}, {"uuid": "9830efe4-61fc-484f-968c-cff0a7e0779f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3465", "content": "Fortinet Series 1 \u2014 Analysis of CVE-2022\u201340684 https://medium.com/@INTfinity/fortinet-series-1-analysis-of-cve-2022-40684-88870994e6e0", "creation_timestamp": "2026-08-02T17:00:05.203573Z"}, {"uuid": "7585f36c-7654-45f7-83a8-c0ab06b83907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3466", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-08-02T17:00:05.151664Z"}, {"uuid": "da80b7fa-3630-4583-9243-5b6f63c4c767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4068", "type": "seen", "source": "https://t.me/purp_sec/192", "content": "\u041f\u043e\u0445\u043e\u0436\u0435, \u0443 Fortinet \u043d\u0430\u0447\u0430\u043b\u043e \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u043e\u0441\u044c, \u043a\u0430\u043a \u0438 \u0443 Apple.\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043f\u0443\u0433\u043d\u0443\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u2014 \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate. \u041d\u043e \u0442\u043e\u0433\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-4068), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0435\u0449\u0435 \u0432 2022 \u0433\u043e\u0434\u0443. \u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0435.\n\n#blue_team", "creation_timestamp": "2026-08-05T00:00:09.209498Z"}, {"uuid": "16997f4d-47aa-45d0-b31c-7233253cedfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "seen", "source": "https://t.me/true_secator/8237", "content": "\u042f\u043f\u043e\u043d\u0441\u043a\u0430\u044f Trend Micro \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 0-day Apex One (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows.\n\nApex One - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u0442 Trend Micro \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u043e\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u0435\u0431-\u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0438\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-34926 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u043d\u0430 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Apex One, \u0438 \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0436\u0435\u0441\u0442\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e TrendAI \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0443 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0412\u0447\u0435\u0440\u0430 CISA \u0442\u0430\u043a\u0436\u0435\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-34926\u00a0\u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Trend Micro \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0430\u0433\u0435\u043d\u0442\u0435 Apex One Standard Endpoint Protection (SEP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Trend Micro Apex One, \u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 0-day \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438,\u00a0\u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2025 \u0433\u043e\u0434\u0430\u00a0Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u0432 Apex One (CVE-2025-54948) \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0443\u043b\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430\u00a0(CVE-2022-40139) \u0438\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430\u00a0(CVE-2023-41179).\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f CISA \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Trend Micro Apex, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u043b\u0438\u0431\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-05-25T12:14:34.000000Z"}, {"uuid": "fa44a3b6-7b37-4039-80da-611b5f38399d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1380", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nPoC\n\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-08-05T00:00:56.584166Z"}, {"uuid": "7ee7ee07-25f4-468c-81d8-f2d915c39096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "60b3633c-2693-4464-9f48-61d71fd45edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-05T00:00:40.062432Z"}, {"uuid": "02915090-9bf4-4116-8579-cad9504366ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/breachdetect/1223754", "content": "{\n  \"Source\": \"xforums[.]st\",\n  \"Content\": \"Leaked 15k+ FortiGate VPN accounts including configuration files and VPN passwords via CVE-2022-40684\", \n  \"author\": \" (Anony)\",\n  \"Detection Date\": \"06 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.168702Z"}, {"uuid": "83e7765f-cc3b-4eee-b17e-026103316339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/breachdetect/1236428", "content": "{\n  \"Source\": \"xforums[.]st\",\n  \"Content\": \"Leaked 15k+ FortiGate VPN accounts including configuration files and VPN passwords via CVE-2022-40684\", \n  \"author\": \" (Anony)\",\n  \"Detection Date\": \"20 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.198619Z"}, {"uuid": "81adb3a3-8ea1-41e9-addb-fda8b1b30c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "022e657a-a924-4ba5-94fa-7c55684076a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:00:03.366309Z"}, {"uuid": "f5721389-c173-4000-9328-464366eac89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:11.951053Z"}, {"uuid": "df8259c7-303c-4f5f-bdec-64e61d52050a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:15:10.254127Z"}, {"uuid": "3aff11f9-5552-4393-82d1-4c80eed1dcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:00:08.171258Z"}, {"uuid": "4ac75655-201b-4cb1-ae2d-a2d14220daa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40320", "type": "seen", "source": "https://gist.github.com/EbonJaeger/dbd95fac767f33b74282ee64940b0537", "content": "545 updates:\n- **VTK** was updated to **9.6.2-52** ([@Jaredy899](https://github.com/getsolus/packages/commit/3eeed71a21b6404fbc9cc67f5738da02ec14f05b)).\n- **act** was updated to **0.2.89-1** ([@Tbusk](https://github.com/getsolus/packages/commit/49053300be294b1388260be1cfc8637561b53d2a)).\n- **aegisub** was updated to **3.4.2-47** ([@Jaredy899](https://github.com/getsolus/packages/commit/b81985b4c8506fb6303ea01996bb6525ae742375)).\n- **akonadi** was updated to **26.04.3-130** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2b1d033a683c8607d143975b0342af00aace8142)).\n- **akonadi-mime** was updated to **26.04.3-108** ([@HarveyDevel](https://github.com/getsolus/packages/commit/55371d3e45ee42be782cc48c71ee328df77abed0)).\n- **allegro** was updated to **5.2.11.3-16** ([@androidnisse](https://github.com/getsolus/packages/commit/a71933b3ff396d429eb144cb8543cea4debe489e)).\n- **appstream-catalog** was updated to **20260821-75** ([@joebonrichie](https://github.com/getsolus/packages/commit/dfbc21b5e1c2981536b232cc206e5e1f701fc43a)).\n- **argon2** was updated to **20190702-8** ([@sebo505](https://github.com/getsolus/packages/commit/c0089ab47b38aaf88dd89fb8570f3098ced91b01)).\n- **astroid** was updated to **0.17-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/a14ded0d01b17ff0f57928f397a14fd72a3669f1)).\n- **attract** was updated to **2.7.0-24** ([@Jaredy899](https://github.com/getsolus/packages/commit/16a692c87e8e37379f6c38f1db343b022eabcf4d)).\n- **aubio** was updated to **0.4.9-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/08d8db615b5feb1bdc0f7debc65bc5fb8c9c1051)).\n- **audacious-plugins** was updated to **4.6.1-63** ([@Jaredy899](https://github.com/getsolus/packages/commit/1f569dcfcedcb2c23a8dd13c605d22be6eca956d), [@androidnisse](https://github.com/getsolus/packages/commit/8727bcf0029d9a0e2129255f5a6fcea19e956a39)).\n- **audacity** was updated to **3.7.8-52** ([@androidnisse](https://github.com/getsolus/packages/commit/5e607d1a04d90c3db7d3c7119f9cd0b589cb6a31)).\n- **audiofile** was updated to **0.3.6-5** ([@androidnisse](https://github.com/getsolus/packages/commit/9620a2dc0a65c2898706b3740a97f8837f390e49)).\n- **azahar** was updated to **2126.0-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/f5e126eddb55977f200cbcee08988fbdb48d6b41), [@HarveyDevel](https://github.com/getsolus/packages/commit/e93fcb77030374456424a8e66a324de7103b773b), [@androidnisse](https://github.com/getsolus/packages/commit/6790022c1016288ffdab6a65bdddb2a7511b5fe5)).\n- **baloo-widgets** was updated to **26.04.3-105** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3cf2d36a0233df8b62d2fb34e0f149560e7aef0a)).\n- **bbswitch** was updated to **0.8-395** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a549a0d7889faa65daac0ca91bd09da4c18174d8), [@HarveyDevel](https://github.com/getsolus/packages/commit/6cb57e5c6a47db468e97cfb189aed45f042e3c3a)).\n- **bibletime** was updated to **3.2.0-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3ce886ff52b670db0d03ff05bb334dc8d702939d)).\n- **blender** was updated to **5.0.1-106** ([@Jaredy899](https://github.com/getsolus/packages/commit/2622360b663b90e0f7a92ced3b1841d43762a021)).\n- **bluedevil** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/922c958144e275938b61a44e47fb4914453cf056)).\n- **bluejay** was updated to **1.0.3-9** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dca098a25d67a11fa78d0ccc1a3fbf798a96ecc3)).\n- **botan3** was updated to **3.13.0-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/cc9aee5e154c116bf7fecc091043708936999b65)).\n- **bottom** was updated to **0.14.8-40** ([@EbonJaeger](https://github.com/getsolus/packages/commit/4523af9dceb82c3e8c7e169ebcca819fa3b8765a)).\n- **brave** was updated to **1.93.137-290** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ffc6eba901dc251f6b8ada222e5ef0b517364976)).\n- **breeze** was updated to **6.7.4-167** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8dbb22e2b513adf1049a943f84b7291307f378ee)).\n- **breeze-icons** was updated to **6.29.0-115** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bcd36cdead8e21404596526599988b383ed14ed7), [@HarveyDevel](https://github.com/getsolus/packages/commit/eee073cb9bfbcc1b14289715ad3dfc6dce83b518)).\n- **broadcom-sta** was updated to **6.30.223.271-467** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb28490a762224a3caee4ec221011093188ca596), [@HarveyDevel](https://github.com/getsolus/packages/commit/1473396a1dfb02889d3ca7adc512b51b97ea26ec)).\n- **buildkit** was updated to **0.32.2-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/1706d6acc7ed7fdc61c36734b711af4e2ea7e027)).\n- **ca-certs** was updated to **20250807-50** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5800a4846431f9b5f1df23b77c445f16123b316d), [@EbonJaeger](https://github.com/getsolus/packages/commit/17436b79454e1585a022747efcfefd66bc10314a)).\n- **calibre** was updated to **9.13.0-239** ([@Jaredy899](https://github.com/getsolus/packages/commit/b9db0c62fb74f180156f975cd4b29e195d86cd52), [@HarveyDevel](https://github.com/getsolus/packages/commit/f3892eb2bf0b9d63f239ac63b85ecdb2098602eb)).\n- **cemu** was updated to **2.6-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/759dac425f6e100bef7d300de2ea7494431a400c)).\n- **cherrytree** was updated to **1.7.1-53** ([@sebo505](https://github.com/getsolus/packages/commit/f6ce60f909ca31f2912f47770639a9d5290f120f)).\n- **chiaki-ng** was updated to **1.10.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/d244e9934691950d489e56a2bfae07d470a71d75), [@HarveyDevel](https://github.com/getsolus/packages/commit/7a6bdd4e5535a10d98b63b192e6b6726cbe3b161)).\n- **chromaprint** was updated to **1.6.0-15** ([@Jaredy899](https://github.com/getsolus/packages/commit/aae5e75d6ea62bcd2c97952745452c2614c336f5)).\n- **cinelerra-gg** was updated to **2026.07-54** ([@Jaredy899](https://github.com/getsolus/packages/commit/5c721b92614c17fec9fe7bbf23c7711664439b09), [@androidnisse](https://github.com/getsolus/packages/commit/527707e8d068073f79e350765d0447a9fa98adf7)).\n- **cloc** was updated to **2.10-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/8238920714396f09994850457aa6bea732aa3d27)).\n- **cmus** was updated to **2.12.0-26** ([@androidnisse](https://github.com/getsolus/packages/commit/8b0b873377d135f12a79acdffc27d428ba9c25c6)).\n- **collada-dom** was updated to **2.5.0-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/32552ee72495d83ce8fc7ee55d27f9cba2898818)).\n- **colord-kde** was updated to **26.04.3-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ef5ae742a296af7f45931c73b7ab17e6c0c72123)).\n- **containerd** was updated to **2.3.4-76** ([@Jaredy899](https://github.com/getsolus/packages/commit/dffaf8c9745342049a2d2b0c75461bb4330f80ac)).\n- **copyq** was updated to **16.0.0-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4edd7aeb52e6e314bb98be86354f88c55a0a81fd)).\n- **corectrl** was updated to **1.5.2-48** ([@Jaredy899](https://github.com/getsolus/packages/commit/9f61c26a2f7050565ce67e317354cc845b1cd730)).\n- **croc** was updated to **11.2.4-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/6fb77d2a4bb46917d88d5c306ac1384eeb82987e)).\n- **crun** was updated to **1.29.1-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/32830e90f8dbafaad0669d25d4f2ac413deb308c)).\n- **cryfs** was updated to **1.0.3-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/7a004c1074cf7ce789023082464a01fd3b4263ea)).\n- **deadbeef** was updated to **1.10.3-59** ([@Jaredy899](https://github.com/getsolus/packages/commit/e0e89145125c394134b9e556341954f2cde775ba), [@androidnisse](https://github.com/getsolus/packages/commit/e722ccd41242dbbf977d37e0492f04974ed9e0f6)).\n- **diffoscope** was updated to **328-22** ([@davidjharder](https://github.com/getsolus/packages/commit/0773fc221feb4cfd0f1da86b68196054d2bfd72c)).\n- **digikam** was updated to **9.1.0-70** ([@Jaredy899](https://github.com/getsolus/packages/commit/6a55727b3ec64c037c278ecdee17700687b47a8d), [@HarveyDevel](https://github.com/getsolus/packages/commit/bcfd1b844be1679a56a44705770247043542ff08)).\n- **discord** was updated to **1.0.154-175** ([@HarveyDevel](https://github.com/getsolus/packages/commit/62c24eac339c569dfd1bbd32df3abab701e71636)).\n- **docker-compose** was updated to **5.5.0-67** ([@Jaredy899](https://github.com/getsolus/packages/commit/a2d76f9dd8de2953d305f45c7fcd6f5762e97e4b)).\n- **doctl** was updated to **1.167.0-42** ([@davidjharder](https://github.com/getsolus/packages/commit/7de19b4f036ce551125c12af87fba328b70dd773)).\n- **dolphin** was updated to **26.04.3-120** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86c8f35974d7bddcb9122f0a93c090567b44f6ea)).\n- **dolphin-emu** was updated to **2512-92** ([@Jaredy899](https://github.com/getsolus/packages/commit/19d9a3bbd74d91f7cd8a6eb296f2bf52f7dcc716), [@HarveyDevel](https://github.com/getsolus/packages/commit/d7d36f946a9d8d0dfae51fc61daa3ddf8bb566ae)).\n- **dragon** was updated to **26.04.3-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/6263ce67e1052d0f0297867d4d2a94a8e1e52975), [@HarveyDevel](https://github.com/getsolus/packages/commit/c1dd5f4d21607f184eb284d05c0f727936b4cd6f)).\n- **droidcam** was updated to **2.1.4-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/881dc73602bc358ca389564e41765390cc699619)).\n- **dsp** was updated to **2.0-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/f31c43d9ff6f99d796056e63615da0608ed08353)).\n- **dua-cli** was updated to **2.42.1-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/d5fa10fd904166f95bef8e16a7a6a17c389e573a)).\n- **dust** was updated to **1.2.5-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/21ba131439b93995f115dc6c09ab05076df9c096)).\n- **easytag** was updated to **2.4.3-25** ([@androidnisse](https://github.com/getsolus/packages/commit/8d1518002289f7ebf36df5b562afe2760c63efee)).\n- **eden** was updated to **0.2.1-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/b303b9ab8cb2fe55bf3318001ce5089449cdf4f4), [@Jaredy899](https://github.com/getsolus/packages/commit/2b0153187a22fca41778b7f5f75f5963be63cc07), [@HarveyDevel](https://github.com/getsolus/packages/commit/ee7bf37a19e1e11c3cbf7025e15cada31fc940fa)).\n- **elisa** was updated to **26.04.3-79** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6747e5ea68b65ef6461c9153d69275bec9bb9c27)).\n- **endless-sky** was updated to **0.10.16-26** ([@androidnisse](https://github.com/getsolus/packages/commit/dbafac3477592d47c2f803e9682a74f6f93db985)).\n- **extra-cmake-modules** was updated to **6.29.0-111** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f805c3efb57242511eb12bd6db493ccc966fc408)).\n- **falkon** was updated to **26.04.3-78** ([@HarveyDevel](https://github.com/getsolus/packages/commit/94086cfe9a593122c21b646517bf355798e09308)).\n- **fceux** was updated to **2.6.6-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/778741d81e9dfb0637e22fafca1dbd8fe4bb2ef4), [@davidjharder](https://github.com/getsolus/packages/commit/7c495a6261375dbdc29508831c0b0feffab325e8)).\n- **fcitx5-qt** was updated to **5.1.11-6** ([@HarveyDevel](https://github.com/getsolus/packages/commit/27af8c8c562c9a435d661795c414f095e7b957e9)).\n- **ffmpeg** was updated to **9.0.1-182** ([@Jaredy899](https://github.com/getsolus/packages/commit/e4cedd4f7c71fb5253042f0b0c46e6db527b4e53), [@davidjharder](https://github.com/getsolus/packages/commit/6ceb4d1c3dfe2cece64dfdd631f17d9cde3f5222)).\n- **ffmpeg-4.4** was updated to **4.4.6-14** ([@davidjharder](https://github.com/getsolus/packages/commit/869be90e01909f329905866fc71add5a88185403)).\n- **ffmpegthumbnailer** was updated to **2.3.0-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/0d0cb0681637140b8ed8b0288db3a626c9c8c197)).\n- **ffmpegthumbs** was updated to **26.04.3-105** ([@Jaredy899](https://github.com/getsolus/packages/commit/6e866b491308819b486beb55f2a2b10d87361843)).\n- **ffms2** was updated to **5.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/8b82747e6a6a9e491f6d1741c8f44046ba7e81d3)).\n- **firefox** was updated to **154.0-421** ([@joebonrichie](https://github.com/getsolus/packages/commit/aef369c5a24db6a8ef0c7c4da6506949a1d65c65), [@HarveyDevel](https://github.com/getsolus/packages/commit/d7359b3b71e863a7bfd250034a4869d157a8e5ae)).\n- **firefox-langpacks** was updated to **154.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c737757846774d86357808f4487682022645105a)).\n- **flacon** was updated to **12.0.0-16** ([@androidnisse](https://github.com/getsolus/packages/commit/9e662bcd896bfeb5c9f13c3ae039b0ad1a3132f0)).\n- **fooyin** was updated to **0.12.5-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/0049263844369986838b049762d20c61daeabe0c), [@androidnisse](https://github.com/getsolus/packages/commit/8c0e4775efbab8437aba2f2df1f5d294cc72848b)).\n- **freecad** was updated to **1.1.3-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/f230f877a9ab58d4889466782b157406f2146545)).\n- **freeorion** was updated to **0.5.1.2-42** ([@Jaredy899](https://github.com/getsolus/packages/commit/8719e737db356dc7cb9e867113924fc7bfc06928)).\n- **freerdp** was updated to **3.30.0-56** ([@Jaredy899](https://github.com/getsolus/packages/commit/78999329505cb38f69c581e417a9a470713f7fd5)).\n- **gammaray** was updated to **3.4.0-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9b1fdafbc46d69b6f6cf4995bd49ff6f8f3b536f)).\n- **gdu** was updated to **5.37.0-7** ([@DinimixisDEMZ](https://github.com/getsolus/packages/commit/21ee9ea2ad901be8cc58dbed7f2bd861c9345ed3)).\n- **geeqie** was updated to **3.1-30** ([@davidjharder](https://github.com/getsolus/packages/commit/4f5aafb30f79a473b5ba7f42eac9a0f258009d65)).\n- **gegl** was updated to **0.4.70-68** ([@Jaredy899](https://github.com/getsolus/packages/commit/88bb0d7f78a51040f3337abdd7c66911ba7728b4)).\n- **ghostwriter** was updated to **26.04.3-65** ([@HarveyDevel](https://github.com/getsolus/packages/commit/00957a3da9a2f6765a9d8d446681286f5dc6c263)).\n- **gifski** was updated to **1.34.0-19** ([@Jaredy899](https://github.com/getsolus/packages/commit/9dbf79dec201fbbf5d17b9bf7ce91a120d7fb60f)).\n- **glibc** was updated to **2.43-145** ([@EbonJaeger](https://github.com/getsolus/packages/commit/85562dbe1ee32ebc04ac795a0c1498742788dc06)).\n- **gnucash** was updated to **5.16-68** ([@Jaredy899](https://github.com/getsolus/packages/commit/acead308aad0aaa9f6a08d53dfed31d08ffd740d)).\n- **gnuradio** was updated to **3.10.12.0-23** ([@Jaredy899](https://github.com/getsolus/packages/commit/54cdd0c6d7d60439a1def8be6dbc03427c3f4e56)).\n- **golang** was updated to **1.27.0-146** ([@silkeh](https://github.com/getsolus/packages/commit/5ddec4cbc7fa28d1f16a0966f04ed791dfc6c737)).\n- **gource** was updated to **0.56-25** ([@Jaredy899](https://github.com/getsolus/packages/commit/cb74849a0750e132958a0c241842a813003edfdc)).\n- **gpu-screen-recorder** was updated to **5.13.3-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/b2b9b61b5bd10722208b8f276e57c20363cf5fd6)).\n- **graph-tool** was updated to **2.98-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/355f08ecaa87aa125e936ed44cc5a65ef7e1e56e)).\n- **gstreamer** was updated to **1.28.6-145** ([@Jaredy899](https://github.com/getsolus/packages/commit/d7bf8dbb1594e3027974bf4ed065651e43435a7b), [@androidnisse](https://github.com/getsolus/packages/commit/2312201860a9bdf0c4c32e3cb4c783d8c8475039), [@davidjharder](https://github.com/getsolus/packages/commit/11c9cbd37de581962ff128b7322e64dfae48915d), [@HarveyDevel](https://github.com/getsolus/packages/commit/198c2b43c693bf14dcf2334a6e229bb179cbd5cc)).\n- **guitarix** was updated to **0.47.0-26** ([@Jaredy899](https://github.com/getsolus/packages/commit/f18deeea045a422aa3bf6f3d3744cae5ad314719)).\n- **gum** was updated to **2.0.0-6** ([@Jaredy899](https://github.com/getsolus/packages/commit/401195c34bf8ac0da294c8532205f938f9c71357)).\n- **guvcview** was updated to **2.2.2-27** ([@Jaredy899](https://github.com/getsolus/packages/commit/f0346e70cd8f02bc4bdfb70f06ab272b5802b393)).\n- **gwenview** was updated to **26.04.3-122** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9b27a795b4dd1295bbcaaa5ed632eb4df7161312)).\n- **handbrake** was updated to **1.11.2-52** ([@davidjharder](https://github.com/getsolus/packages/commit/ef7e67de841d5d56532124e526b7cb519d325cb2)).\n- **haruna** was updated to **1.8.1-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/e24b4b78253431ce3445bfab5dc2764b23f9da22), [@HarveyDevel](https://github.com/getsolus/packages/commit/f6b9bac3f8895881c510562dc7e1ddbefeee813b)).\n- **heaptrack** was updated to **1.5.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/6c16d225b259c513d42c3a6676c56f4a40ea580c)).\n- **hedgewars** was updated to **1.0.3-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/80de031a657d5c0b3907df28cdd917eb4b6f31b6)).\n- **htop** was updated to **3.5.3-30** ([@HarveyDevel](https://github.com/getsolus/packages/commit/11fc99cf579aa5437703a3bf26f0afcee86fd359)).\n- **hyprland-qt-support** was updated to **0.1.0-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7bdb2b7ce50f64405241eb503ca26ad53ebe6d28)).\n- **hyprpolkitagent** was updated to **0.1.3-8** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ceb1cfad9b9fe925011a58b213a9fbfc1dc45eb9)).\n- **inkscape** was updated to **1.4.4-81** ([@Jaredy899](https://github.com/getsolus/packages/commit/00abc8557d0f8b8bc1be2ed043efc728b43496be)).\n- **innoextract** was updated to **1.9-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/7ae653c0c115fc66bc37266244b43314e2f1667b)).\n- **isoimagewriter** was updated to **26.04.3-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c07ef9f6296b9353e35255e02fc45305f596e0dd)).\n- **jellyfin-desktop** was updated to **2.0.0-2** ([@Jaredy899](https://github.com/getsolus/packages/commit/63c929a6f95e32299dba3d575c5bdcaaf99aea49), [@HarveyDevel](https://github.com/getsolus/packages/commit/e5b994a218bb723d6fe568acf39bf91d75afad16)).\n- **k3b** was updated to **26.04.3-111** ([@Jaredy899](https://github.com/getsolus/packages/commit/3b0f52d9034785981efb02951550c72f617e0168), [@androidnisse](https://github.com/getsolus/packages/commit/99e6c57c8fae1ef82c20cff80269d85cfd732fad)).\n- **kaccounts-integration** was updated to **26.04.3-98** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10e109ece90609925c85dd3fbcdfd36e95a9db70)).\n- **kasts** was updated to **26.04.3-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7ef58335f1284cc667c0c377154bdd1d565c4cab)).\n- **kate** was updated to **26.04.3-117** ([@HarveyDevel](https://github.com/getsolus/packages/commit/05fe98f9483dfe26925dc184a0763d03053bd8c4)).\n- **kbibtex** was updated to **0.10.0-25** ([@Jaredy899](https://github.com/getsolus/packages/commit/1a9268b9959126e27fcca85e7f5f9a50f9e9b6da)).\n- **kcachegrind** was updated to **26.04.3-57** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2df92e47d2c099477bb13845eee4f12a65909983)).\n- **kclock** was updated to **26.04.3-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d4f2b9cd9601d89826c46f0fe8aed852bd41da4)).\n- **kddockwidgets** was updated to **2.4.0-5** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd06de6c4c3a6efaea0c030d7d6147816ef6362f)).\n- **kde-cli-tools** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/925733378a6b384f3b7b6a6f840cd187043a3208)).\n- **kdeconnect** was updated to **26.04.3-104** ([@HarveyDevel](https://github.com/getsolus/packages/commit/366fa217d68fd0fbab51f5f940597063aacc86ff)).\n- **kdenetwork-filesharing** was updated to **26.04.3-95** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec7d81908c0c733f592e3f5abfbc21badcccc0b7)).\n- **kdenlive** was updated to **26.04.3-135** ([@Jaredy899](https://github.com/getsolus/packages/commit/a510eea2a43a02b0684f484f296087014d085fed), [@HarveyDevel](https://github.com/getsolus/packages/commit/8b38ae0095658a256535166343d572aa9bdbe4f3)).\n- **kdeplasma-addons** was updated to **6.7.4-154** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3176d46a8f0c945a1d313754fff34624bca58101)).\n- **kdevelop** was updated to **26.04.3-95** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e6fe63d4e50a5fe82166afae2877dd8819507c15)).\n- **keepassxc** was updated to **2.7.12-56** ([@Jaredy899](https://github.com/getsolus/packages/commit/bec081f31c508afd0b63cf3c6fde48368b011159)).\n- **keysmith** was updated to **26.04.3-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cbb0e6b671c1fb49d16249547cfd7ce6748acb74)).\n- **kf6-attica** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/35ba45262dce93f577b61364056ab090ddc84ab1)).\n- **kf6-baloo** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8799b12bd27431f5be9049477a806ba4e9e9bd3e), [@HarveyDevel](https://github.com/getsolus/packages/commit/9ae66b880fb322980da29827ea22b75bdc9ad6b6)).\n- **kf6-bluez-qt** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b20d7bdfa0d7a6ba8e068688a444eaaf55150d79), [@HarveyDevel](https://github.com/getsolus/packages/commit/a85c15eec0f9f2eb01ded387501c53350dcd89d0)).\n- **kf6-frameworkintegration** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/13fd08c6089bfb940d00940ed57cb775f3a5a8a3)).\n- **kf6-karchive** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d02d3823cc5029894677a91bcfb36ba5f990ecf6)).\n- **kf6-kauth** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a2e265928aa3b881080dafa7de1d3a2518753b97)).\n- **kf6-kbookmarks** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7188601b12bd9071f675648aca0575e59c08d6bc)).\n- **kf6-kcalendarcore** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4c781a1c64ce92d62cb8cf1187ff6ea76382fbeb), [@HarveyDevel](https://github.com/getsolus/packages/commit/d61cb4f2d92f75e38927528467a63a9545d4a534)).\n- **kf6-kcmutils** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/261f96eeebdc080ff4be879459cee3a806d388d4), [@HarveyDevel](https://github.com/getsolus/packages/commit/1c01e497a57206876dd8a06535560d99f67bcee1)).\n- **kf6-kcodecs** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2e317a56026200a0937025a12aab989d39a7fa32)).\n- **kf6-kcolorscheme** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/25752544662207b1621b3df5fd50dbebb73ca140), [@HarveyDevel](https://github.com/getsolus/packages/commit/2722b6e0f29210752eeef0f9701bb4332debee7c)).\n- **kf6-kcompletion** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/45a3e3d0972d7e11b67d323f57a829f054d983fc)).\n- **kf6-kconfig** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/863513fd8f7891eb04339095f2a3b7ef3e41e462), [@HarveyDevel](https://github.com/getsolus/packages/commit/3c194b58c54be24e419590b20e4539180d757ff3)).\n- **kf6-kconfigwidgets** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10bf47384f44d42f3609cf3d280d39418111ef71), [@HarveyDevel](https://github.com/getsolus/packages/commit/99139c5e1d5b1c690d0456ecb2a9f3013d92a9ea)).\n- **kf6-kcontacts** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1feebd4fcd71afa667443774ca322c93b5c6dce9), [@HarveyDevel](https://github.com/getsolus/packages/commit/1261ec1f31ca0a111ac3f298a45da45c7c596356)).\n- **kf6-kcoreaddons** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/31ec71deb2242fced46526eeeeb6d5a75692c8ac), [@HarveyDevel](https://github.com/getsolus/packages/commit/0fd51601d6113aa70efde135c8acc31e97f345ba)).\n- **kf6-kcrash** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/90d2a80fb8d59e64bd731b3a5a90a557538ea6d4)).\n- **kf6-kdav** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/800d97b52c7999ab9201d2d7cd2255b98e47e2f9)).\n- **kf6-kdbusaddons** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6a93dabd48e6276087b1fd2648dabfb25f373b65), [@HarveyDevel](https://github.com/getsolus/packages/commit/0f3b77f890a1b980f4d5f33af22ea1c491e09b66)).\n- **kf6-kdeclarative** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eda51f124c567993c40b992df605d6d66cc1480c), [@HarveyDevel](https://github.com/getsolus/packages/commit/1e50c1284ea5b6c868e797b173ad06286ac64080)).\n- **kf6-kded** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9cc642389d09adf47dc387f2034fcbd1de5d05ce)).\n- **kf6-kdesu** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/300f1b4dbefb502310eb41ee3bcd8b92b54f4b1b)).\n- **kf6-kdnssd** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a84166e1cff0ae56123d4cec2a2ce22f165beaa5)).\n- **kf6-kdoctools** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bc98a351194db3338977f3f5847ba9347ee25287)).\n- **kf6-kfilemetadata** was updated to **6.29.0-42** ([@Jaredy899](https://github.com/getsolus/packages/commit/f57a327c355e42e6c7e2b9d1910e1c14ecb0052a), [@HarveyDevel](https://github.com/getsolus/packages/commit/a1d3a975904e5a1099972177ec9d41aff9874cb4)).\n- **kf6-kglobalaccel** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/288cb99bce64dc25157c0b5d1dfb9598e5bad462), [@HarveyDevel](https://github.com/getsolus/packages/commit/ae0b1df4f161bf63eaf5c9ff2baa4e8c41f4e74b)).\n- **kf6-kguiaddons** was updated to **6.29.0-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/03660ec67b12947aafdfaba9e3e00a92ec03e42a), [@HarveyDevel](https://github.com/getsolus/packages/commit/b71c31137bc8ec83a82dc0fcf5116635f4666933)).\n- **kf6-kholidays** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d6f586769dbd0ae56c62fa0e998ef7d93ffce1eb), [@HarveyDevel](https://github.com/getsolus/packages/commit/2f8d26093f8d53d054af047ea4f16acb00e4d779)).\n- **kf6-ki18n** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/011f552e0ea9c596d8882b8519f82eb194e855ca), [@HarveyDevel](https://github.com/getsolus/packages/commit/258538e23ce7a145eac8f1fe25b5aa11b02319fe)).\n- **kf6-kiconthemes** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ea9a9fa459867ab8b8fa09b50d4bfd4bdddbf88f), [@HarveyDevel](https://github.com/getsolus/packages/commit/2ad3a7e606a1c2085a043e415cd6dbcb8354d689)).\n- **kf6-kidletime** was updated to **6.29.0-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b64e3c92eb410724a30a6f2a309488cc558d7f0f), [@HarveyDevel](https://github.com/getsolus/packages/commit/d938e984df3784f9c55d15474760b55b36087c72)).\n- **kf6-kimageformats** was updated to **6.29.0-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/13fcbaae6ca009ee3c51377329a74f5add2d1f93)).\n- **kf6-kio** was updated to **6.29.0-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/913e1dceaf85bd54c4be144a29184daebf5091f2), [@HarveyDevel](https://github.com/getsolus/packages/commit/f5734064dabdf04493d7036dbad0ee856a12a9ce)).\n- **kf6-kirigami** was updated to **6.29.0-45** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7bc3e89d922f8f806774424689a07f489f2beab8), [@HarveyDevel](https://github.com/getsolus/packages/commit/9fc3fc1098c0b07b510a6b78c5d925ae56fcac70)).\n- **kf6-kitemmodels** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/64440de1b13a251e5d1dfe7444c2de7cda61fcea), [@HarveyDevel](https://github.com/getsolus/packages/commit/ca083af6c510c629a652a1b616828440e52c99e7)).\n- **kf6-kitemviews** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c497ba528d00bd49d0011da0491d847c1aaf4c77)).\n- **kf6-kjobwidgets** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e168fda606018c8d7fc7824f02b556c1db16761c), [@HarveyDevel](https://github.com/getsolus/packages/commit/c64d6a02ca175613c03811f5138d8a8bd2c23d3e)).\n- **kf6-knewstuff** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c7af7cb3daea451d2f430207d3b56483951917f6), [@HarveyDevel](https://github.com/getsolus/packages/commit/8967f0189aee368454307e796ae9f028917f1fc2)).\n- **kf6-knotifications** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0ac4c3c1271e1e40bdc24cd6570a46e580266ff5), [@HarveyDevel](https://github.com/getsolus/packages/commit/f50fe6b621415e097fddf94a827ef15e2fa22d0a)).\n- **kf6-knotifyconfig** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b9ef574edfdd929c55301438de8ad2e6a843ed0e)).\n- **kf6-kpackage** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/08100eb59b669d36e234d01bb2058c03e293fa52)).\n- **kf6-kparts** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/142f6c5d51ba2997814f9204962d36b6ef262b34)).\n- **kf6-kpeople** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ca212540f4841e16da89dc9e3413643d95c23128), [@HarveyDevel](https://github.com/getsolus/packages/commit/831f8ff5f9903054fcd8eff899683260b0b5ee75)).\n- **kf6-kplotting** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/808b308b32f6b22a75a603d2e2e13cabddf130dc)).\n- **kf6-kpty** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c61600866ebe7c16583aa0f4e84c753c2b849346)).\n- **kf6-kquickcharts** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1769ab7d91343cb996b1060a99634acc4825f63a), [@HarveyDevel](https://github.com/getsolus/packages/commit/09bdd1f41e3716c8c82e838589423b3feb8a9177)).\n- **kf6-krunner** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5dc492f4caaf16b2972af808225a438ee8d67bf2)).\n- **kf6-kservice** was updated to **6.29.0-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/51aa2d0ebb036ebc7ab5f15cf6611c59f53e9b8f)).\n- **kf6-kstatusnotifieritem** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7dee8e19b9def70fe6f10b5cd40dffe4fa942eb6), [@HarveyDevel](https://github.com/getsolus/packages/commit/6838d90abcb60ab634c6fd550cbfe15b628d4726)).\n- **kf6-ksvg** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d636da722a7bb53e93df509c76a4202ddc106173), [@HarveyDevel](https://github.com/getsolus/packages/commit/9362c239bbf4575bae52cafd49340cafea6655ec)).\n- **kf6-ktexteditor** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6c7f2958467c30664ae936671dcfd59f886263e7)).\n- **kf6-ktexttemplate** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8a60022a5ff6245a7cf94e764c76d404badd7d33)).\n- **kf6-ktextwidgets** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e47916f0cbb05e40bcda1f1147dd52d372188f85)).\n- **kf6-kunitconversion** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e799cfdf251809c61b50d30e2c8c1ff3e910b4d0)).\n- **kf6-kuserfeedback** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/79c7e27e8a18f9ca7739e6805d7af767f116e459), [@HarveyDevel](https://github.com/getsolus/packages/commit/3573196a6365690185a4e9b3905a764271ef9e63)).\n- **kf6-kwallet** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/80c512929bb86ecd8f5cc2b36c77e4e2049f79db)).\n- **kf6-kwidgetsaddons** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ddc29bf9068a9ee44c889957ef1a829e719a3deb)).\n- **kf6-kwindowsystem** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a7e70ebc66519d7abbe7778659b777a6ef8098cc), [@HarveyDevel](https://github.com/getsolus/packages/commit/12284e7dc28ca133358ebdaba0b0d3ef99ca5818)).\n- **kf6-kxmlgui** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/075142e63dec90f317d76795f10bdafd0f0622fa), [@HarveyDevel](https://github.com/getsolus/packages/commit/24b77e5dd0860ea2d465a9f669a4c00868b2dc97)).\n- **kf6-modemmanager-qt** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/039d1323f11dbe0ca3a22003de5559cb9a306b46)).\n- **kf6-networkmanager-qt** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cece04876a1126572aad8dbfa919992d04e2204b), [@HarveyDevel](https://github.com/getsolus/packages/commit/bf0d15d66c98eed27df53a19ee6ebf9c7a91f955)).\n- **kf6-prison** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0e6e7ba8e40382bd206d7b9219fdff5869c74042), [@HarveyDevel](https://github.com/getsolus/packages/commit/e3df5b7a61f3c4fc23b28a4c2d419c5c49bd82ff)).\n- **kf6-purpose** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d962bf62c1cdcd20a307c9a1ac9e72067aecff0), [@HarveyDevel](https://github.com/getsolus/packages/commit/97d7ade00b27e80f605cef160687a31316ab09c9)).\n- **kf6-qqc2-desktop-style** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/77d8cd545526e950c71a177ed03e95258ae24d8b), [@HarveyDevel](https://github.com/getsolus/packages/commit/16545c998aa70ba71e9619cfbe1edd355daf19f2)).\n- **kf6-solid** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1e814bdb318014346fdd27c79d7bac8d6df81b38)).\n- **kf6-sonnet** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/16cf53c435892814ec68c6cd046279d0591007c2), [@HarveyDevel](https://github.com/getsolus/packages/commit/be7419a4bfa13ab960a9b7ac64be6b67aa073bb5)).\n- **kf6-syndication** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e96c285082133371eead5dcdc1d92d8d7f827388)).\n- **kf6-syntax-highlighting** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5a32e2a2508ad4371120bdd3084315b118fb97b), [@HarveyDevel](https://github.com/getsolus/packages/commit/e632ac8c57fd70fc5a76c03951b87132b2412237)).\n- **kf6-threadweaver** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a5317ea88b3a02f6295b56e6360fab2db51fd6c1)).\n- **kglobalacceld** was updated to **6.7.4-55** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7a7e0e4ba1c20de219e9a42b1b5b57d71a2c8a0a)).\n- **kgraphviewer** was updated to **26.04.3-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1ef3238db6957ca405e7801c7c012675f07d2eab)).\n- **kid3** was updated to **3.9.7-31** ([@androidnisse](https://github.com/getsolus/packages/commit/7b0ba323bdc703744f3bfdcef4c19a1eaa61117c)).\n- **kidentitymanagement** was updated to **26.04.3-106** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6c16d7d8ca6510821d548fd47ad8a55f02b4ddff)).\n- **kinfocenter** was updated to **6.7.4-152** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5d32108842721e85f369844ae0c7b024dedc0571)).\n- **kio-admin** was updated to **26.04.3-32** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5229bced5bdcc72b66f74cc53730835481c38340)).\n- **kio-extras** was updated to **26.04.3-160** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c647e891bf28a975ecee778b3e79582bd69cf3eb)).\n- **kio-gdrive** was updated to **26.04.3-82** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3971d3d8e3f4e2a944e15580a7db720a915891f4)).\n- **kirigami-addons** was updated to **1.13.1-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0a378e985e6155809ab514c0c055d29c941e79e5)).\n- **klayout** was updated to **0.30.8-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/314b358442ce779d0f8359794fda0223d4d1af11)).\n- **kmail-account-wizard** was updated to **26.04.3-109** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1ee892dd5d5127a3aa14f494724e630cda24a1ed)).\n- **kmymoney** was updated to **5.2.2-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dfe2b66b3b50bb3c73a53619b9440dd377a797c8)).\n- **knighttime** was updated to **6.7.4-18** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f6ffde51ee58df6a8c4fcb3a496a1ee9fdc536e7)).\n- **kompare** was updated to **26.04.3-91** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9cdec52636cf682dcbbf3cfbe0bfb98265ecaa99)).\n- **kompose** was updated to **1.38.0-1** ([@Tbusk](https://github.com/getsolus/packages/commit/764521845dee3bf0c955890e4f9691bad8d36716)).\n- **kontactinterface** was updated to **26.04.3-105** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb0a8a992ff87d0c457d3e195e5980bf643d615f)).\n- **konversation** was updated to **26.04.3-73** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e5dfda406118b097d4a8dc668a8b6e4111e8ae35)).\n- **kpipewire** was updated to **6.7.4-71** ([@Jaredy899](https://github.com/getsolus/packages/commit/5490670e81b97105bdf20dffc7e067a836dcaed9), [@HarveyDevel](https://github.com/getsolus/packages/commit/2e3bd61c97b3a0eabc5f03df91b9ac53426ec037)).\n- **kquickimageeditor** was updated to **0.6.2.1-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/36b75f8e971b4522a9b3d03add759f215e1daaf6)).\n- **kraft** was updated to **2.0.0-16** ([@clintre](https://github.com/getsolus/packages/commit/2245e418ff59f60b57b5dcc2f7f1a71f10602bbd)).\n- **krdc** was updated to **26.04.3-94** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a760375fef0817586b8108ecccbbb3fa0fab8837)).\n- **krdp** was updated to **6.7.4-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/085e9088e7103f5d6d173fde8cd1bc7a493206c2)).\n- **krfb** was updated to **26.04.3-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f4a40c7a720b69569002738568309dcf1b85f15b)).\n- **krita** was updated to **6.0.2-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bb591d5ffc60ae41cd54cfa35c2f5927558e3511)).\n- **kscreen** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6d4bde89c948f7a01cdf19f62f60e47051369d4a)).\n- **kscreenlocker** was updated to **6.7.4-151** ([@HarveyDevel](https://github.com/getsolus/packages/commit/758b51e1bc0493e7f5e89390ff08dfcfa3c2cad2)).\n- **ksshaskpass** was updated to **6.7.4-144** ([@HarveyDevel](https://github.com/getsolus/packages/commit/84750075294ef503ce0d7204e0e039b795c00244)).\n- **ktorrent** was updated to **26.04.3-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cc5f825d240e4396bb289040b490f1cee4d341f7)).\n- **kvantum** was updated to **1.1.8-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5b5f2932d3a378d1747796f2e0eda482c0ce954)).\n- **kwave** was updated to **26.04.3-76** ([@HarveyDevel](https://github.com/getsolus/packages/commit/080dbdebe9964035f59e679ab700eeb61949dc3e)).\n- **kwayland** was updated to **6.7.4-128** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b98909156491448a21a10484ba94fb890fc995a1)).\n- **kwin** was updated to **6.7.4-191** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0a9186ea2f33fdd4c0a95e03e57960173b7ac82f)).\n- **kwin-x11** was updated to **6.7.4-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/78abda7c9f2681bc759a60f8a97d6ffe19f61479)).\n- **layer-shell-qt** was updated to **6.7.4-85** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a9f872cb4b58383d3675cfc59b84886867e304f7)).\n- **ledger** was updated to **3.4.1-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/75e43750347ba4dacc57cfe8389cdc50f305672b)).\n- **lenovo-legion-linux** was updated to **0.0.20-48** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dfec024fc8508bfa76db59e22f89467f399ccbf8), [@HarveyDevel](https://github.com/getsolus/packages/commit/38ed62da41068154017ad693f6384b4904d4150c)).\n- **libboost** was updated to **1.92.0-48** ([@Jaredy899](https://github.com/getsolus/packages/commit/578e5eb20298869f63467246b61c96f7bb1dc921)).\n- **libcmis** was updated to **0.6.3-13** ([@Jaredy899](https://github.com/getsolus/packages/commit/02daff76394009d932474296b652f6660af37bf4)).\n- **libconfuse** was updated to **3.4-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/bdb022bcb9c80dd88c7ddf11c85d0a7a5dd35762)). Includes security fixes for [CVE-2022-40320](https://nvd.nist.gov/vuln/detail/CVE-2022-40320).\n- **libflac** was updated to **1.5.0-19** ([@androidnisse](https://github.com/getsolus/packages/commit/1711b9e040cee775876f4cbf3e5d366fa355d853)).\n- **libfprint** was updated to **1.94.100-11** ([@uni-dos](https://github.com/getsolus/packages/commit/26e185de802a1ef678ce94ce3f15f826dade8736)).\n- **libgit2** was updated to **1.9.7-42** ([@EbonJaeger](https://github.com/getsolus/packages/commit/f7acc9a67e96e46cd930b5c22bd49c3e30c63970)). Includes security fixes for [CVE-2026-53586](https://nvd.nist.gov/vuln/detail/CVE-2026-53586), [CVE-2026-53584](https://nvd.nist.gov/vuln/detail/CVE-2026-53584), [CVE-2026-53585](https://nvd.nist.gov/vuln/detail/CVE-2026-53585), [CVE-2026-53583](https://nvd.nist.gov/vuln/detail/CVE-2026-53583), [CVE-2026-53587](https://nvd.nist.gov/vuln/detail/CVE-2026-53587), [CVE-2026-5917](https://nvd.nist.gov/vuln/detail/CVE-2026-5917).\n- **libgphoto2** was updated to **2.5.34-21** ([@androidnisse](https://github.com/getsolus/packages/commit/87cd8f8932f8f178c074f5e72f3c7a1ef0848de6)).\n- **libheif** was updated to **1.23.1-65** ([@Jaredy899](https://github.com/getsolus/packages/commit/ea7988b6788ef801260a3ae51ce35e4f11c8514e), [@davidjharder](https://github.com/getsolus/packages/commit/90a658db651bd88c781d14efe1e403d2589076d2)).\n- **libixion** was updated to **0.20.0-31** ([@Jaredy899](https://github.com/getsolus/packages/commit/8ef7207c10bbf08202116fe662806fb943ecc44e)).\n- **libkdegames** was updated to **26.04.3-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd477db8acac5fbb6b4bb3c19f427979b16f3118)).\n- **libkolabxml** was updated to **1.3.1-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/5160daeef87b8ae7a421bd009fb9d41b03f8a036)).\n- **libkscreen** was updated to **6.7.4-143** ([@HarveyDevel](https://github.com/getsolus/packages/commit/781e626202e7d1d35c9222a0a9f66b4c06b6db3f)).\n- **libksysguard** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0e6cb822baa2b6cb1e35dfa02d5221cb423802ac)).\n- **libktorrent** was updated to **26.04.3-71** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2d48ce1e85117ea57e55fcbdf1fb9068798c7005)).\n- **liblangtag** was updated to **0.6.8-4** ([@androidnisse](https://github.com/getsolus/packages/commit/3d8ab3e66fbab4ea9e6ecede9848cf6c9bffc30c)).\n- **libldac** was updated to **2.0.2.6-3** ([@androidnisse](https://github.com/getsolus/packages/commit/a982e2f0fd553a467b0ecc3f1877a36161c08d3d)).\n- **libldm** was updated to **0.2.5-14** ([@androidnisse](https://github.com/getsolus/packages/commit/9e911d69aaa3c48234ac4fef6bf3476a2a46052e)).\n- **libmd** was updated to **1.1.0-4** ([@androidnisse](https://github.com/getsolus/packages/commit/ef45716cdc1aba3be3e3e253c2ff0ba83aa0336c)).\n- **libnspr** was updated to **4.40-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2bc8e735ef67aaf74a3b026327fb6266aa4c012b)).\n- **libnss** was updated to **3.127-87** ([@HarveyDevel](https://github.com/getsolus/packages/commit/774881aa5b9baec06fa2d329acf166d085e4c908), [@EbonJaeger](https://github.com/getsolus/packages/commit/d61e3ec8c60d0e79d575b40ac41caaffbf6a040c)).\n- **libnvidia-container** was updated to **1.20.0-13** ([@androidnisse](https://github.com/getsolus/packages/commit/b2b995427ae5ca57762c9563e45ccc582fa1bb74)).\n- **liboauth** was updated to **1.0.3-6** ([@androidnisse](https://github.com/getsolus/packages/commit/f0827b0a444efd92d6d3267fc1974d8f499691ef)).\n- **libopenmpt** was updated to **0.7.3-13** ([@androidnisse](https://github.com/getsolus/packages/commit/72e5613b41866a2ca99b18cd7963982183b26fcf)).\n- **libopenshot** was updated to **0.7.0-50** ([@Jaredy899](https://github.com/getsolus/packages/commit/4f82bfe1d8f307f1aacd2afa836c7bfce78ddf2d)).\n- **liborcus** was updated to **0.21.0-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/3634298b094e4d9a023f582de9ad5757c5979985)).\n- **libphonenumber** was updated to **9.0.36-17** ([@Jaredy899](https://github.com/getsolus/packages/commit/9a95f8eb03b374b84e9fecd95bff80a4808de41c)).\n- **libplasma** was updated to **6.7.4-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/be03de1116b228ddf617a299cbbbee055e41fddd)).\n- **libportal** was updated to **0.10.0-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2329e3002f3a4d64769c3bae391cf79828d3a978)).\n- **libqrtr-glib** was updated to **1.2.2-2** ([@androidnisse](https://github.com/getsolus/packages/commit/18fbce39a78fcc9a9e0e99aabb6bd82fbeee2bfc)).\n- **libquotient** was updated to **0.9.5-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/df9365f7c22763fde45331986e720fa616928092)).\n- **libreoffice** was updated to **26.2.5.2-214** ([@Jaredy899](https://github.com/getsolus/packages/commit/4dd4e324b094b34f8d67eec70b4e8fdd3553ea06)).\n- **libreoffice-voikko** was updated to **5.0-3** ([@androidnisse](https://github.com/getsolus/packages/commit/e1494d737605d04fe6c0a9178a25107db42a0131)).\n- **libshout** was updated to **2.4.6-8** ([@androidnisse](https://github.com/getsolus/packages/commit/1eac31be84234b8e9edc375e29c996f1fafda8a6)).\n- **libsndfile** was updated to **1.2.2-27** ([@androidnisse](https://github.com/getsolus/packages/commit/e44ec8f5465061eee9371286ed0a95f4bca4f01a)).\n- **libspiro** was updated to **20221101-5** ([@androidnisse](https://github.com/getsolus/packages/commit/5eb0e23283e1418f1364e2852de78cf7b23072e2)).\n- **libtorrent-rasterbar** was updated to **2.0.13-49** ([@Jaredy899](https://github.com/getsolus/packages/commit/fbeb0d62ea52057c463755ed2ee9ba59837b86ba)).\n- **libudev0-shim** was updated to **2-2** ([@androidnisse](https://github.com/getsolus/packages/commit/2fa9335ebcadc4d6125be39e5383fdeaf9c00e66)).\n- **libvirt-glib** was updated to **5.0.0-27** ([@androidnisse](https://github.com/getsolus/packages/commit/877da48455212c3f73b1e77d230686e091269f8e)).\n- **libwebkit-gtk** was updated to **2.52.6-148** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3ada5050a3a7734249aef1f87310f4897bd104aa)).\n- **libwhich** was updated to **1.2.0-4** ([@androidnisse](https://github.com/getsolus/packages/commit/72808a44979edff3844727b7cbd368a1bf28c196)).\n- **lightdm** was updated to **1.33.1-52** ([@EbonJaeger](https://github.com/getsolus/packages/commit/bb5ca33c62fa7810fae2dcc3396cafc47c5b8693)).\n- **lightdm-gtk-greeter** was updated to **2.0.9-31** ([@EbonJaeger](https://github.com/getsolus/packages/commit/cd1918cf54b77e336014baf7112606ebacfb28b4)).\n- **lightdm-settings** was updated to **2.1.1-27** ([@EbonJaeger](https://github.com/getsolus/packages/commit/50a66feaac6b20435e03fbf59f8063d5762da70e)).\n- **linux-current** was updated to **7.1.9-354** ([@HarveyDevel](https://github.com/getsolus/packages/commit/11f6a151548fd14b4fdc2e0246ea885d2ada99af), [@HarveyDevel](https://github.com/getsolus/packages/commit/b8134403a6ec9e9947be76f646a2dbe290cb9bed)).\n- **linux-firmware** was updated to **20260810-108** ([@HarveyDevel](https://github.com/getsolus/packages/commit/44f9b1d02b2177b20338ed8fc180f683d0919c2d)).\n- **linux-lts** was updated to **6.18.45-304** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb8336cf24483aee6512a241370ce2984032de94), [@HarveyDevel](https://github.com/getsolus/packages/commit/3de6b6dce070abfa9250832b2b57d0e4507eac81)).\n- **linux-tools** was updated to **7.1.9-139** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dc14c8d4f8ff372e0c4aaadcfbe9fef5d08c2760)).\n- **llvm** was updated to **21.1.8-137** ([@joebonrichie](https://github.com/getsolus/packages/commit/9d45529c4da464aadddc292e0e52d6bb758ebffc), [@joebonrichie](https://github.com/getsolus/packages/commit/faf7da11cbcb7076af256d7cb31aaf0cee0620e9)).\n- **localsearch** was updated to **3.11.1-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/2d47bfc516325555da6ba93ce1ee1da77ea2c947)).\n- **lsd2dsl** was updated to **0.6.0-6** ([@Jaredy899](https://github.com/getsolus/packages/commit/72bceeeda47b4a6d507496223b0c507c79256428)).\n- **luanti** was updated to **5.17.0-43** ([@davidjharder](https://github.com/getsolus/packages/commit/730c188731083de91cea750e489105b44501eb93)).\n- **lucene++** was updated to **3.0.9-17** ([@Jaredy899](https://github.com/getsolus/packages/commit/1c049b49f6df3f0cbf79ca289e37587da9e4d0c0)).\n- **luminance-hdr** was updated to **2.6.1.1-37** ([@Jaredy899](https://github.com/getsolus/packages/commit/14930ad3537871fcfebcccb86e3e72e3f8d79057), [@Jaredy899](https://github.com/getsolus/packages/commit/f9a1532c1918b590594fb51f31749265fe8b4d21)).\n- **mame** was updated to **0.289-54** ([@androidnisse](https://github.com/getsolus/packages/commit/542fbf5295e062aceb28cad3d5135d5489bddebd)).\n- **marble** was updated to **26.04.3-118** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c9330f77b04aad37903b88eee1cd9035d8902a9f)).\n- **melonds** was updated to **1.1-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1cdf2e43471c95ffb65a43cd69da4defa76d1577)).\n- **merkuro** was updated to **26.04.3-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4452408b6cad0e5012a058be7937a80a590bc6b3)).\n- **mgba** was updated to **0.10.5-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/4928cd2fb6222a4b13e187321e0a5a006cfa34ab)).\n- **milou** was updated to **6.7.4-144** ([@HarveyDevel](https://github.com/getsolus/packages/commit/00d83c922101d004741efc881982d3063edfa2b3)).\n- **mimetreeparser** was updated to **26.04.3-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd648358b4d677edaaaa71dd6f0d9af6fb462bd9)).\n- **mindforger** was updated to **2.0.0-7** ([@Jaredy899](https://github.com/getsolus/packages/commit/07f3c5597b82d4cc6ecc3db121ef33835218d3fc)).\n- **minidlna** was updated to **1.3.3-23** ([@Jaredy899](https://github.com/getsolus/packages/commit/6925d78258349ec73a51abc91a20a3cc6c6c3d8a), [@androidnisse](https://github.com/getsolus/packages/commit/08140055f61a5140f378ced77ae782e33100cdb3)).\n- **miopen** was updated to **7.2.0-10** ([@Jaredy899](https://github.com/getsolus/packages/commit/4f23f7f822be9dae78493aae25b876499cf04092)).\n- **mir** was updated to **2.28.0-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/0786a82e06c71753a7a7d2c5a0194e876b28c872)).\n- **mixxx** was updated to **2.5.6-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f4cdcaf447fd875909727f3bbb64c1b37279f8c), [@androidnisse](https://github.com/getsolus/packages/commit/a82aeae045c877b6bfeed7173f5a9f523e4c13db), [@HarveyDevel](https://github.com/getsolus/packages/commit/734a565ae1caa77a4f3b67acf6eb1431b63956e4)).\n- **mkvtoolnix** was updated to **100.0-117** ([@androidnisse](https://github.com/getsolus/packages/commit/0f458053472cd4c7794416a48781c0046ec722ba), [@Jaredy899](https://github.com/getsolus/packages/commit/e62aac59ffecfa4300183542ec54e6c8528afac4)).\n- **mlt** was updated to **7.40.0-58** ([@Jaredy899](https://github.com/getsolus/packages/commit/0a3336fc95496a1d86a66c514f91b66a0e7d1828)).\n- **moc** was updated to **2.5.2-26** ([@Jaredy899](https://github.com/getsolus/packages/commit/3bff498767fd80db33fcd34d29a4b0d114a15905), [@androidnisse](https://github.com/getsolus/packages/commit/2e3a2fa8d2cec60d461634bd98d26e77db1ba1b1)).\n- **mozilla-vpn-client** was updated to **2.38.0-7** ([@HarveyDevel](https://github.com/getsolus/packages/commit/37b8f632f8405fb0b728b674a97d77f0e301c24a)).\n- **mpd** was updated to **0.24.9-108** ([@Jaredy899](https://github.com/getsolus/packages/commit/04ca5cddf38a0eb8d56567c7c4cc20343d068d00), [@androidnisse](https://github.com/getsolus/packages/commit/802d3cab2b1023e8ae3e235b7753f92a9dc6f509)).\n- **mpv** was updated to **0.41.0-135** ([@Jaredy899](https://github.com/getsolus/packages/commit/219386f9dbfff681189a857158c137711313b163)).\n- **mtxclient** was updated to **0.10.1-14** ([@EbonJaeger](https://github.com/getsolus/packages/commit/14e688623f215d56c81c0d08dd73c9b4c2f98de8)).\n- **musescore** was updated to **4.7.1-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ce36f0ee84981e0edd5a1b1f9ee219bc180ddc3f)).\n- **nano** was updated to **9.2-218** ([@HarveyDevel](https://github.com/getsolus/packages/commit/346823068ffd3cc9069dcd9b844de01cfa8aece3)).\n- **ncmpcpp** was updated to **0.10.1-46** ([@Jaredy899](https://github.com/getsolus/packages/commit/ca88cee7e0a37abe10d58cb186e646dd3c90d97c)).\n- **neochat** was updated to **26.04.3-61** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bac22abede1df19a9379f43b38d63069b61abc70)).\n- **netavark** was updated to **2.1.0-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/1bd58113f3312f16cd87d8ed11e7a73c28cf15b9)).\n- **netbird** was updated to **0.77.0-3** ([@sheepman4267](https://github.com/getsolus/packages/commit/438c936d519e9ea886982bc71901ff4e8459cadb)).\n- **newt** was updated to **0.52.25-14** ([@davidjharder](https://github.com/getsolus/packages/commit/321c822b2b18251548ae192df3c72c87b15fc76d)).\n- **nextcloud-client** was updated to **33.0.7-89** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2d9b1ced0cfa17df1e42604ab63480e2068452d5)).\n- **nextpnr** was updated to **0.10-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/ebe76392b388cdc347590170149aad40d5b9353e)).\n- **nheko** was updated to **0.12.1-29** ([@EbonJaeger](https://github.com/getsolus/packages/commit/396e44e637189f65803a607b44a41ccf91e06ca0)).\n- **nlohmann-json** was updated to **3.12.0-11** ([@androidnisse](https://github.com/getsolus/packages/commit/97d26530c2b2536360d453bc03dd329e4439f7ae)).\n- **nnn** was updated to **5.3-35** ([@davidjharder](https://github.com/getsolus/packages/commit/455e4d30bbe056d27e918ab06ae35cf3e007f8af)).\n- **notes** was updated to **2.3.1-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c1306d07393591e935f1a0236d465cb5572961aa)).\n- **nushell** was updated to **0.115.0-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/155aca8774f876531ac490bb7cdd3f7d88823bb5)).\n- **nvidia-470-glx-driver** was updated to **470.256.02-157** ([@HarveyDevel](https://github.com/getsolus/packages/commit/705769df7ab99acd653a6b0021c698fa2a34e4f1), [@HarveyDevel](https://github.com/getsolus/packages/commit/7f19b6f663dc07e29fbe79b9007a3f0fd04d71eb)).\n- **nvidia-580-glx-driver** was updated to **580.178.04-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b9b67bb5c43d76b6fa836af0074799e77d672181), [@HarveyDevel](https://github.com/getsolus/packages/commit/149befc6e27c0941f7b765dcc2406c40f27922a8)).\n- **nvidia-open** was updated to **610.57.04-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5005fec6b5e740a1145e56185715ac42a90ed71), [@HarveyDevel](https://github.com/getsolus/packages/commit/03b49fde0711fd72a763fd62b0cdc8c14aa3f5da)).\n- **obs-studio** was updated to **32.0.4-134** ([@Jaredy899](https://github.com/getsolus/packages/commit/58d322eeaf87077dfcd45854d3d3d8b81f991b60), [@davidjharder](https://github.com/getsolus/packages/commit/b24d2b2db1ce778394c057a82ce9475988eb2e4a), [@HarveyDevel](https://github.com/getsolus/packages/commit/75efd9439d72d1a9491793ba29699655a1cd18fb)).\n- **okular** was updated to **26.04.3-127** ([@HarveyDevel](https://github.com/getsolus/packages/commit/815369f002043f55d3a0ee042b0cc4a840ce9f30)).\n- **open-vm-tools** was updated to **13.1.0-367** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bbb8768b0f5dcd9f1913d8a78316b378972b5ee1), [@HarveyDevel](https://github.com/getsolus/packages/commit/377fe4c74a74bc48453fe42636b4feea0b89a782)).\n- **opencv** was updated to **4.13.0-51** ([@Jaredy899](https://github.com/getsolus/packages/commit/4966519746000718ad85afd609e78cfb71164063)).\n- **openimageio** was updated to **3.1.13.1-59** ([@Jaredy899](https://github.com/getsolus/packages/commit/310a7d0184b191ad92faea2dc3c6f445f234d361)).\n- **openjdk-21** was updated to **21.0.12-10** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f86035c0474db47137f905769b0d0dc3c909f3d)).\n- **openjfx-21** was updated to **21.0.5-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/3561022a01d31fa7566445d68330b2783d781cff)).\n- **openmw** was updated to **0.51.0-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/e0c72997a770ca2f880cc9ded1397ce21051cfb1), [@Jaredy899](https://github.com/getsolus/packages/commit/be39763d7e287383250723a25d07ad8920f5728c)).\n- **openrazer** was updated to **3.12.4-393** ([@HarveyDevel](https://github.com/getsolus/packages/commit/64fd3fd47dee76661499ca379d6e3e6dde218002), [@HarveyDevel](https://github.com/getsolus/packages/commit/a81eb9ce862025b60794ff11ec136c26af252fcb)).\n- **openrct2** was updated to **0.5.3-71** ([@androidnisse](https://github.com/getsolus/packages/commit/e146b9dc1a67eb612122fd7f39f715f2a9e7a680)).\n- **openroad** was updated to **26.06.30-11** ([@Jaredy899](https://github.com/getsolus/packages/commit/e6ce144a9a1b74802e4cc1643adae309c981b97d)).\n- **openscad** was updated to **20260621-27** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f56d46a68eae74a9505e94a05902bfbb35559af)).\n- **opentofu** was updated to **1.12.6-21** ([@davidjharder](https://github.com/getsolus/packages/commit/5af512f76893ac2048311d218926ac261bdeb23f)).\n- **openvdb** was updated to **12.0.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/8dfb5919830d0414109fe5d930b678cca6dc0af1)).\n- **openxr** was updated to **1.1.62-8** ([@HuricanDev](https://github.com/getsolus/packages/commit/fe10abe3db21064ac6ddce604234b35e223fc7b3)).\n- **opera-stable** was updated to **135.0.5973.41-404** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a9803971c5ebc69dec2cd71ee6ba0d4b783bdfc5), [@HarveyDevel](https://github.com/getsolus/packages/commit/27a2079054c840f6ba81d94c35e6040f77293d20)).\n- **opus-tools** was updated to **0.2-5** ([@androidnisse](https://github.com/getsolus/packages/commit/ed18aa4b1ad214afc82fe72940d77d49d7d2580b)).\n- **osinfo-db** was updated to **20251212-17** ([@davidjharder](https://github.com/getsolus/packages/commit/8ec77794e78965af9b8ccc7a0a2522f4b95f3c10)).\n- **osinfo-db-tools** was updated to **1.12.0-12** ([@davidjharder](https://github.com/getsolus/packages/commit/c52d9abc5e2fac87535ac55e65fec3008e43c2be)).\n- **owncloud-client** was updated to **6.0.0.17092-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8acd99a4d70144a0d7ab390cdc5304048c5f97a5)).\n- **oxygen** was updated to **6.7.4-140** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6dfaa7e0d47d9a4caef7ef4cd75e9a8193f9b04b)).\n- **oxygen-icons** was updated to **6.29.0-4** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b2d3cf05245be1e084cf533378a0e95ad7db6ab5)).\n- **passt** was updated to **2026.07.28-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/423ef0229332a61d2b8e29a282a4b64b693908ce)).\n- **pcl** was updated to **1.15.0-11** ([@Jaredy899](https://github.com/getsolus/packages/commit/379dd8b6abc14826f5970b07bbe99496b230b9f3)).\n- **pelican** was updated to **4.12.0-12** ([@davidjharder](https://github.com/getsolus/packages/commit/468106cddd065629477f04b33dbe4484f32449dd)).\n- **pianobar** was updated to **2024.12.21-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/3e33dd522940f56f3314dd51ce846d2bbabe14e9)).\n- **pipewire** was updated to **1.6.8-123** ([@Jaredy899](https://github.com/getsolus/packages/commit/b37037d16bb4e5fa1f8d2f330a3f52a5436169a4)).\n- **pkcs11-helper** was updated to **1.31.0-4** ([@davidjharder](https://github.com/getsolus/packages/commit/3f80db3ce7990fb922332ac01b4ab1eac072d30c)).\n- **plasma-activities** was updated to **6.7.4-55** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ad11791de206f022f70c71d5aec7c3160e845b79)).\n- **plasma-desktop** was updated to **6.7.4-186** ([@HarveyDevel](https://github.com/getsolus/packages/commit/146398f29360bc1e2974b077dc320dffecccb647)).\n- **plasma-integration** was updated to **6.7.4-153** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e01b05cbf1adda0929f901a41c3b1c848722e994)).\n- **plasma-keyboard** was updated to **6.7.4-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c6a13a0b7511e9715cd9b302d6919f2e8a81b796)).\n- **plasma-nm** was updated to **6.7.4-151** ([@HarveyDevel](https://github.com/getsolus/packages/commit/417409bff355c0bf9586cb531804a68a277d63e1)).\n- **plasma-pa** was updated to **6.7.4-147** ([@HarveyDevel](https://github.com/getsolus/packages/commit/def07e4583c50b013814714217c81201fb5b707f)).\n- **plasma-sdk** was updated to **6.7.4-128** ([@HarveyDevel](https://github.com/getsolus/packages/commit/43554a593a438cdbff2fe9b7e5c019b0d01aef40)).\n- **plasma-systemmonitor** was updated to **6.7.4-84** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b4d1ebd7d219ef58a8b15151dc8297640baed0fd)).\n- **plasma-welcome** was updated to **6.7.4-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f4cb0b7bfc7e035066fc949b9422c758334310d2)).\n- **plasma-workspace** was updated to **6.7.4-216** ([@HarveyDevel](https://github.com/getsolus/packages/commit/91ad98ed4cd2f8b650ada258d2ed907bd22a33b7)).\n- **plasma5support** was updated to **6.7.4-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/55faac3bb74f48094ee01440ea8f0db4a9a71530)).\n- **podman** was updated to **6.1.0-52** ([@Jaredy899](https://github.com/getsolus/packages/commit/b8e77a4c60d15f552b6b1a946a8a9163b58cfd56)).\n- **poedit** was updated to **3.9.1-54** ([@Jaredy899](https://github.com/getsolus/packages/commit/024d813269d697dc2464315d1ec1210fd381655d)).\n- **powerdevil** was updated to **6.7.4-157** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2811b65a1ba27c0550eeb830e5de2c60326a27fd)).\n- **print-manager** was updated to **6.7.4-131** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eaa9ba7c937bb042e4da08274b471de3da08d606)).\n- **pulseview** was updated to **0.4.2-18** ([@Jaredy899](https://github.com/getsolus/packages/commit/40dc2ea82b7d7635f84de5eafc34e70aba06fc47)).\n- **pyqt-builder** was updated to **1.19.1-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f18332c5cfbfc0b2024ed26d9d10b8e1838ef90a)).\n- **python-ast-serialize** was updated to **0.8.0-1** ([@clintre](https://github.com/getsolus/packages/commit/776fcaa093aa059d5f729ff903c121509f712e9a)).\n- **python-astroid** was updated to **4.3.1-43** ([@EbonJaeger](https://github.com/getsolus/packages/commit/dedfa1a5ce35302d1f3d4f40a3aa8f19e065dc45)).\n- **python-hatch-argparse-manpage** was updated to **1.0.2-2** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a4af950978f357a21f103842730e24733bc58390)).\n- **python-hatch-fancy-pypi-readme** was updated to **25.1.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/c794fce80ab343a011ecdce0eb145b208dbd9cb5)).\n- **python-hatch-nodejs-version** was updated to **0.4.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a44ae3e6b898485088428200c487fdef3c5ee1f5)).\n- **python-hatchling** was updated to **1.32.0-15** ([@EbonJaeger](https://github.com/getsolus/packages/commit/aa97312abdaa6405d2d0862ed244b4dc59fc0d78)).\n- **python-html2text** was updated to **2025.4.15-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a4931f7827ea940595b659663aeef1001883207a)).\n- **python-icecream** was updated to **2.2.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a3ff239c9401edc21227b2c15da922eb8e0d73f3)).\n- **python-icoextract** was updated to **0.3.0-3** ([@EbonJaeger](https://github.com/getsolus/packages/commit/29e411c7cd561928bc54f911506ca3d6212d46f3)).\n- **python-imagesize** was updated to **2.0.0-14** ([@EbonJaeger](https://github.com/getsolus/packages/commit/ad1ff70902fe7baba0e34a951e1e38a2fa147fc0)).\n- **python-injector** was updated to **0.24.0-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/cecb888a86074eff88ecb73ba4a7d7bfe1d77caf)).\n- **python-installer** was updated to **1.0.1-15** ([@EbonJaeger](https://github.com/getsolus/packages/commit/9365967ed976521456de896432f1a893951aa929)).\n- **python-intervaltree** was updated to **3.2.1-8** ([@EbonJaeger](https://github.com/getsolus/packages/commit/b4c94bcee58e824eb150b21ec71e70ec3fc6dcf1)).\n- **python-invoke** was updated to **3.0.3-16** ([@EbonJaeger](https://github.com/getsolus/packages/commit/fcb4e37630c00bdf2e7a2cbb22e5cc80aa2a85b5)).\n- **python-ipyparallel** was updated to **9.2.0-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/ec5b41c156d6affd699e025990cc0356be2ef464)).\n- **python-librt** was updated to **0.15.0-3** ([@clintre](https://github.com/getsolus/packages/commit/61ae4431df9fa7c6c64e5fd75404dd3c99a90103)).\n- **python-llvmlite** was updated to **0.49.0-23** ([@clintre](https://github.com/getsolus/packages/commit/cc77d648893a3db1e6fe4d073a5db33d9ddf461d)).\n- **python-lzma-mt** was updated to **0.2.1-3** ([@clintre](https://github.com/getsolus/packages/commit/a565255465fe2d56d35c4057f2402712ab88d40a)).\n- **python-markdown** was updated to **3.10.3-18** ([@clintre](https://github.com/getsolus/packages/commit/d1c233a2d8ddf64d54df219fdd5be60be4a1c092)).\n- **python-markdown-math** was updated to **0.9-10** ([@clintre](https://github.com/getsolus/packages/commit/2056f6dcb6fa6d023b40cc268198e3bea02ed0f8)).\n- **python-markupsafe** was updated to **3.0.3-19** ([@clintre](https://github.com/getsolus/packages/commit/d4da973e6cce2203dc00d2a5d5fd6b7393e203bf)).\n- **python-marshmallow** was updated to **4.3.1-13** ([@clintre](https://github.com/getsolus/packages/commit/f264a1365f7f3ca3cf45fdbbfe01dcfc0a0da5b1)).\n- **python-maturin** was updated to **1.14.1-71** ([@clintre](https://github.com/getsolus/packages/commit/f08aa090a3b820a78f7c0f2d348fcbb99c3ee13b)).\n- **python-mistune** was updated to **3.3.4-21** ([@clintre](https://github.com/getsolus/packages/commit/40d22e6c0fffcb2ea7dec82af69e8a01938f2409)). Includes security fixes for [CVE-2026-44897](https://nvd.nist.gov/vuln/detail/CVE-2026-44897), [CVE-2026-44899](https://nvd.nist.gov/vuln/detail/CVE-2026-44899), [CVE-2026-44708](https://nvd.nist.gov/vuln/detail/CVE-2026-44708).\n- **python-more-itertools** was updated to **11.1.0-13** ([@clintre](https://github.com/getsolus/packages/commit/d9da0baa0e132ec4acaa8a73def697e1a867e2a7)).\n- **python-mpi4py** was updated to **4.1.2-5** ([@clintre](https://github.com/getsolus/packages/commit/bf0594500c255b4db51cd0f6ca6012bbcb77912c)).\n- **python-mss** was updated to **10.2.0-8** ([@clintre](https://github.com/getsolus/packages/commit/140615bde8c27c27435dd566b4179d7337a6fc24)).\n- **python-mypy** was updated to **2.3.1-35** ([@clintre](https://github.com/getsolus/packages/commit/9b74c95d9f756d28de43739d2c222ddee353d346)).\n- **python-nbformat** was updated to **5.11.1-18** ([@clintre](https://github.com/getsolus/packages/commit/e31795d8e613ba4d3e1118511b2b021bf7a0fde9)).\n- **python-notebook** was updated to **7.6.2-21** ([@clintre](https://github.com/getsolus/packages/commit/6ab11b585bc69225f34e6ab14109a612d3d4019a)).\n- **python-numba** was updated to **0.67.0-19** ([@clintre](https://github.com/getsolus/packages/commit/3c4432ea5629fa62065f461537eb59cf1001f4e7)).\n- **python-numexpr** was updated to **2.14.2-20** ([@clintre](https://github.com/getsolus/packages/commit/39f0ca8ad19bd6787712ebe3ebe489d079c1ffa4)).\n- **python-numpydoc** was updated to **1.10.0-21** ([@clintre](https://github.com/getsolus/packages/commit/19cff825d52d8d43f0eec61e738ae8897e204fea)).\n- **python-oauthlib** was updated to **3.3.1-15** ([@clintre](https://github.com/getsolus/packages/commit/4b7ea387c4e4fe1fc9b434609b60bf75c0fbb100)).\n- **python-omemo-dr** was updated to **1.2.0-6** ([@clintre](https://github.com/getsolus/packages/commit/7f6d9aa9d87a9d8f6435f83b94343c122dc31024)).\n- **python-openssl** was updated to **26.4.0-26** ([@clintre](https://github.com/getsolus/packages/commit/8a5f81c0ec00d14f0e179f97aa5672ab02e01fe5)).\n- **python-optree** was updated to **0.19.1-5** ([@clintre](https://github.com/getsolus/packages/commit/62a3752d9702a17d19ccc3087f1e48bdfa03ad88)).\n- **python-pandas** was updated to **3.0.5-35** ([@clintre](https://github.com/getsolus/packages/commit/0e1c2b03425e66adf5805f4571bf0b5f3156bb28)).\n- **python-patsy** was updated to **1.0.2-13** ([@clintre](https://github.com/getsolus/packages/commit/0ec643d822087ee085202781499e32bf471e33eb)).\n- **python-pbs-installer** was updated to **2026.08.07-4** ([@clintre](https://github.com/getsolus/packages/commit/ab0d0d3c157c504122d84d6a22ea268469b11a01)).\n- **python-peewee** was updated to **4.3.0-22** ([@clintre](https://github.com/getsolus/packages/commit/be3b710238d3e6c0bfecfd222456ffad00e7c13a)).\n- **python-pydyf** was updated to **0.12.1-1** ([@clintre](https://github.com/getsolus/packages/commit/1e17d03fb493dd2a4e4fc702db7f7a82e5f2d1d1)).\n- **python-pyee** was updated to **14.0.0-13** ([@clintre](https://github.com/getsolus/packages/commit/f55de9960d0928e5d9c33c9c09a6079eb6b1c536)).\n- **python-pyphen** was updated to **0.17.2-1** ([@clintre](https://github.com/getsolus/packages/commit/6911fe4e62da7baf2cd7c38f6d655cc289c5f361)).\n- **python-pyqt6-sip** was updated to **13.12.0-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e0ba67e7da06644b13711bd82c95b9c322fe43f6)).\n- **python-pyqt6-webengine** was updated to **6.11.0-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5cc258f578bab6971953da57bcb5ad0f109fc6a6)).\n- **python-pyside6** was updated to **6.11.2-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/618a814ebe10958bbd4ed75fe74c73fc3c6dc025)).\n- **python-pytest-rerunfailures** was updated to **16.6-7** ([@clintre](https://github.com/getsolus/packages/commit/b4a7035325cd32eebf35a2c7ca3c9b8ac6b62b4d)).\n- **python-pytest-timeout** was updated to **2.5.0-13** ([@clintre](https://github.com/getsolus/packages/commit/fe3cbf1e9a8876277907a026e732d1dd0a0737c5)).\n- **python-pywayland** was updated to **0.4.19-3** ([@clintre](https://github.com/getsolus/packages/commit/9e84c8dc795ddd9dadc8f3bf6c210f5641067226)).\n- **python-qt6** was updated to **6.11.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/70a47b4f62c36c4709c3a0d2f583604e50975d96)).\n- **python-sip** was updated to **6.16.1-53** ([@HarveyDevel](https://github.com/getsolus/packages/commit/090c2bb25eef4d3d7b87c96fc008f1d9cd588698)).\n- **python-stevedore** was updated to **5.6.0-15** ([@clintre](https://github.com/getsolus/packages/commit/a6040136001a65b03f4bb1edb3a3af0cd8cb2856)).\n- **python-tenacity** was updated to **9.2.0-17** ([@clintre](https://github.com/getsolus/packages/commit/c9dc1b751cac16923974e96f1d9af73a2ee4e21f)).\n- **python-tifffile** was updated to **2026.8.16-12** ([@clintre](https://github.com/getsolus/packages/commit/bd31e3dcd965803d91cf678f7122d9428c5f6d56)).\n- **python-tinyhtml5** was updated to **2.1.0-1** ([@clintre](https://github.com/getsolus/packages/commit/e18bba6324d82402f88aaaffc07f7db6e6182972)).\n- **python-tornado** was updated to **6.5.8-22** ([@clintre](https://github.com/getsolus/packages/commit/7e9a9149d2d03de1323c80ef76a95c7a112fe682)).\n- **python-tox** was updated to **4.60.0-21** ([@clintre](https://github.com/getsolus/packages/commit/2fe343b0606e17023137cde89b15ecf2ed86f7df)).\n- **python-trio** was updated to **0.34.0-16** ([@clintre](https://github.com/getsolus/packages/commit/c38775aed8533759b06b23fae22928eb801e0e38)).\n- **python-txaio** was updated to **26.6.1-12** ([@clintre](https://github.com/getsolus/packages/commit/ee46b6bece25a73d4868464eba8871c3966824a4)).\n- **python-typing-inspection** was updated to **0.4.4-2** ([@clintre](https://github.com/getsolus/packages/commit/ad896cf1b757ce63b2de2b116dddef68a42672b9)).\n- **python-uv-dynamic-versioning** was updated to **0.14.1-3** ([@clintre](https://github.com/getsolus/packages/commit/10dabaddb126289c0a3d1a22a75e655b02782ba5)).\n- **python-watchfiles** was updated to **1.2.0-1** ([@davidjharder](https://github.com/getsolus/packages/commit/fd5ae31ca051f27f3bffa5ad02e068e9f3bf9e1a)).\n- **python-weasyprint** was updated to **69.0-1** ([@clintre](https://github.com/getsolus/packages/commit/2245e418ff59f60b57b5dcc2f7f1a71f10602bbd)).\n- **python-zipstream-ng** was updated to **1.9.3-7** ([@clintre](https://github.com/getsolus/packages/commit/49337ae55499e17e72a95379a72936d28f71a301)).\n- **qadwaitadecorations** was updated to **0.1.7-16** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4c13d4704f6423e1d9f087cd5cf95f6e7f4ca09d)).\n- **qbittorrent** was updated to **5.2.2-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/75cd2f0fbc82aad9f73b8e0c0f92e30ff4ce907a)).\n- **qcoro** was updated to **0.13.0-9** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86bb99917b2834487ccfa4d0f8c81e04ae570917)).\n- **qownnotes** was updated to **26.8.3-296** ([@Jaredy899](https://github.com/getsolus/packages/commit/d17d503ccd3544bc835efc5f118b7e5c257e96d4)).\n- **qt-creator** was updated to **20.0.1-80** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5259c9082167c466218a848cc3d3d07b0f4f68ff)).\n- **qt6-3d** was updated to **6.11.2-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5991fce9533890930794b6fe80bb46734a6d2f08)).\n- **qt6-5compat** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a0d425326be139d9d6d9ec8e5e2049f8f4163dec)).\n- **qt6-base** was updated to **6.11.2-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4a04fd4a9968e7f6e1f8e53869b80b4155c9617b)).\n- **qt6-charts** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1db13612d003409e305bcc2f67b8ebf47ff30cdb)).\n- **qt6-connectivity** was updated to **6.11.2-23** ([@HarveyDevel](https://github.com/getsolus/packages/commit/918e1f77ffe7d442b4e1addb627f8d974fa9ac9f)).\n- **qt6-datavis3d** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d962ea536a45c7a8aa8c259755e8296cac4d844)).\n- **qt6-declarative** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9db0d8ea1dcb2f67742bb4a2b6d33e7453ae8792)).\n- **qt6-docs** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/731a76df6b1ee6117628b08c5fc117bc97688fac)).\n- **qt6-graphs** was updated to **6.11.2-3** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6e46720f7d1ffca6e8879e093abf2f69de3dea1e)).\n- **qt6-imageformats** was updated to **6.11.2-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/120ba842e2fa4a1cf2fa9f1e33cece4042441bbe)).\n- **qt6-languageserver** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/faf378b69c550498f4a10157d9ad5bfbf299a39d)).\n- **qt6-location** was updated to **6.11.2-18** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a7b0a6a7da89e734a3b08d7418b9bf11f73fd89e)).\n- **qt6-lottie** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/340253b091509b56daceb964152931f6a7360bae)).\n- **qt6-multimedia** was updated to **6.11.2-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/d1259ab4870cea64879092dddc6fb513fbb6d94a), [@HarveyDevel](https://github.com/getsolus/packages/commit/3ca78a856353f6d4f2c56e5f732d825254de9816)).\n- **qt6-networkauth** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/081e9d99847072a38c1dad7a32d8878ac074da40)).\n- **qt6-positioning** was updated to **6.11.2-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/fecefee2f6e2c434c9119cbd77b5dcecb3b92b78)).\n- **qt6-quick3d** was updated to **6.11.2-25** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b0704ea4b078ff1292c128849bed5e932d78822a)).\n- **qt6-quicktimeline** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/abd2bdb37d42a0e1cd9aa2a9fd1ed0e78bda94fd)).\n- **qt6-remoteobjects** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0f788ddc21f2f5856b7d8be0777e93487c923fa0)).\n- **qt6-scxml** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec44208a7b281b1a2594f9cc37720a1a7a271cfa)).\n- **qt6-sensors** was updated to **6.11.2-23** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e191778f236c6685e035c14c943a42fcc2c2234a)).\n- **qt6-serialbus** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b790383a9c2b6953ffc65039e2ae18e5c1ceb2f1)).\n- **qt6-serialport** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/640aa913b520e36bdd1a716f10235bbbc19eb341)).\n- **qt6-shadertools** was updated to **6.11.2-29** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec632269d6d8767b9a46a93aa734290c18ee951a)).\n- **qt6-speech** was updated to **6.11.2-17** ([@HarveyDevel](https://github.com/getsolus/packages/commit/644e2d8ee1cdad994e94620ee6025b147bfd57df)).\n- **qt6-svg** was updated to **6.11.2-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10be038e1b118bd4bc9730357a4f8a51d3765004)).\n- **qt6-tools** was updated to **6.11.2-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/85179bee9c9e14270c6408d03f4aece5d6b67850)).\n- **qt6-translations** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/514f9c9f76e9c67fea9fbf833b4cb9a6702f7cb5)).\n- **qt6-virtualkeyboard** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b0754b6382b4d91a6e553e4cbfa966ad429e6717)).\n- **qt6-wayland** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d75ef882a17b731e09587a7f6bc9d73ba8ecd1e7)).\n- **qt6-webchannel** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1d56e9289b27c3190caf70321e3684d6f15857ce)).\n- **qt6-webengine** was updated to **6.11.2-88** ([@Jaredy899](https://github.com/getsolus/packages/commit/ed26fbe4d54e1fa242719b48772532abf360d4bb), [@HarveyDevel](https://github.com/getsolus/packages/commit/6f06592004bfea028530c604229679bf06c20625)).\n- **qt6-websockets** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/36204f2c4ee0a17d049e92c2e304506b446e80d8)).\n- **qt6-webview** was updated to **6.11.2-17** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4ae7e187dc5c243bdb0cf5d750603c5a0527e069)).\n- **qt6ct** was updated to **0.11-16** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6bd2655bffb7462894df47b9265a5f0278857aef)).\n- **qt6gtk2** was updated to **0.7-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/92e99deac5c33bd76a479573140c4fc2933662de)).\n- **qtforkawesome** was updated to **0.3.4-2** ([@HuricanDev](https://github.com/getsolus/packages/commit/504a30e9c291ae0e318dfc2c69dfa0d37be5f896)).\n- **qtutilities** was updated to **6.22.0-2** ([@HuricanDev](https://github.com/getsolus/packages/commit/d5fa68f1027b239cd37e8fbcfe0196e4fe1e014f)).\n- **quakespasm** was updated to **0.96.1-18** ([@androidnisse](https://github.com/getsolus/packages/commit/2bd00e31cec39861ea4d24b8d4f302cfa4f375e1)).\n- **quassel** was updated to **0.14.0-18** ([@Jaredy899](https://github.com/getsolus/packages/commit/6e2b5df2a172ede1a042bcab6e788bee8245c45f)).\n- **quickshell** was updated to **0.3.0-10** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0db8eff659470987290a387bce057ac17991ae16)).\n- **radiotray-ng** was updated to **0.2.10.1-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/266b495405a4ed3ac474b07c3baf4af8a4cbdce2)).\n- **retroarch** was updated to **1.22.2-91** ([@Jaredy899](https://github.com/getsolus/packages/commit/f5d462d30ad1364d7313f450abdb01f59a0fc65e)).\n- **rio** was updated to **0.5.25-13** ([@Jaredy899](https://github.com/getsolus/packages/commit/3f634c9bdeef5cfcd6dc59c2422c940c064a4ec3)).\n- **rtl8852bu** was updated to **1.19.3-88** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0acccc44a1a7b409707110e09c3ca1a6ed48c524), [@HarveyDevel](https://github.com/getsolus/packages/commit/c90a6ee430eed84d5f194705b5159637af2c697d)).\n- **scrcpy** was updated to **3.3.4-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/e61125a5fc2c054c32f3882bf03394ca18876e29)).\n- **scummvm** was updated to **2026.3.0-27** ([@androidnisse](https://github.com/getsolus/packages/commit/574a830599a46d684891ce311209f1a9db156256)).\n- **sddm** was updated to **0.21.0-61** ([@HarveyDevel](https://github.com/getsolus/packages/commit/da360a9627e1b6efe1c07bf0bf631f421d382b9d)).\n- **sdl1-mixer** was updated to **1.2.12-9** ([@androidnisse](https://github.com/getsolus/packages/commit/bb3fcede58ec6193bd56f2ef4f48f6fa900e6f1a)).\n- **sdl2-mixer** was updated to **2.8.0-18** ([@androidnisse](https://github.com/getsolus/packages/commit/54cfc4a73a852a69b77cd4fbc5238e1de118bcb6)).\n- **sfml** was updated to **2.6.2-16** ([@androidnisse](https://github.com/getsolus/packages/commit/12a39a88a1089d4c77f741a8b734dbca5744e04b)).\n- **shotcut** was updated to **26.8.1-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eff586875820b905f5d910ab3e4950dd5baac8f3)).\n- **simplescreenrecorder** was updated to **0.4.4-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/0643ae1ebe3aaaca42c7369c4e8ad66d4fff6df0)).\n- **skrooge** was updated to **25.10.0-63** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e056fcb0a8fdcbc2ee968c8efa58c8b358ff8950)).\n- **slick-greeter** was updated to **2.2.7-39** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5062a28c7efcb1ee9686867ff7820bcc95b4db0e)).\n- **solidity** was updated to **0.8.35-7** ([@Jaredy899](https://github.com/getsolus/packages/commit/68f18a93ce232c221edadb5a439efc4b5f6e8cd1)).\n- **solseek** was updated to **1.5.0-49** ([@clintre](https://github.com/getsolus/packages/commit/0430d1c342ffe9ef07c4762036557236343dd4c1)).\n- **sox_ng** was updated to **14.8.0-34** ([@androidnisse](https://github.com/getsolus/packages/commit/2a792ef909add2e02c58942ad355d0a58fba2996)).\n- **spectacle** was updated to **6.7.4-131** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86cfdf08895f620e9d2b04d1c12456f0993c1e02)).\n- **spek** was updated to **0.8.5-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/9f83e6b9461e8335b869a7e5901d0ab593785092)).\n- **spyder3** was updated to **6.1.6-45** ([@Jaredy899](https://github.com/getsolus/packages/commit/0b965ffdc970bfd044cf829c14b47f2313f6142d)).\n- **stellarium** was updated to **26.2-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a163d1cbbab8f23627417c831870e118b5daa140)).\n- **strawberry** was updated to **1.2.27-104** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2776e3ebbd9487e4c979e72d3a155035630cd5a0)).\n- **subtitlecomposer** was updated to **0.8.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/6c7bae7b8f03fae978ca7760e1547ddf6468ff18), [@HarveyDevel](https://github.com/getsolus/packages/commit/3918a6d6136ff68d67499482b66aad7ffefae094)).\n- **sudo** was updated to **1.9.17_p2-59** ([@EbonJaeger](https://github.com/getsolus/packages/commit/d2abc11db4f1c17010f4daae2ff6a7fda9678c22)).\n- **supercollider** was updated to **3.14.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/dce0763b702c12a7ad1f7769795d2994bb749969)).\n- **syncthingtray** was updated to **2.1.4-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/0677e1198cf73d73ffb9d092d0d4fe0ad35d45d8), [@HuricanDev](https://github.com/getsolus/packages/commit/fe4fb1318fbef4e0dfcbd1177bd001162d230e3b)).\n- **synfig** was updated to **1.5.5-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/94bafe60ba41bb3ab7ad6857045b1a795d7ae4a2)).\n- **systemd** was updated to **261.2-190** ([@EbonJaeger](https://github.com/getsolus/packages/commit/da1afbec7f5b0814ec63f41cd7223bc67a203175)).\n- **systemsettings** was updated to **6.7.4-148** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4f3e9a9174ab1318636fba3d39f87e2c5c8afe81)).\n- **tabularis** was updated to **0.20.0-2** ([@clintre](https://github.com/getsolus/packages/commit/0a90d2f7af8806930dbc9090dc3c274018397b1a)).\n- **tailscale** was updated to **1.102.3-64** ([@Jaredy899](https://github.com/getsolus/packages/commit/c46ffa3d15a1f73f31a13ddfe487dc74eea496fe)).\n- **telegram** was updated to **6.6.2-245** ([@Jaredy899](https://github.com/getsolus/packages/commit/c6549af1b0a491e6898eb6cfcf6aea6828340a2f), [@HarveyDevel](https://github.com/getsolus/packages/commit/9805828711081c1def877451fbef163ecee84ed1)).\n- **thunderbolt-software-user-space** was updated to **0.9.3-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/03b6bb807a5e42454d686f10711dabd947abc288)).\n- **tigervnc** was updated to **1.16.2-34** ([@Jaredy899](https://github.com/getsolus/packages/commit/6aceec6ef12b652fa0b81627aed3bc3fbbe5f995)).\n- **tiled** was updated to **1.12.2-30** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c69b0acb6bb26268c4421f78fd1bfe517d4835bc)).\n- **tmux** was updated to **3.7c-35** ([@Jaredy899](https://github.com/getsolus/packages/commit/15113311c5609e2e3f40e2b739d3f532741f0698)).\n- **tokodon** was updated to **26.04.3-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/97e11430efd6152885020492f0d112fab97a98ed)).\n- **unifdef** was updated to **2.12-3** ([@davidjharder](https://github.com/getsolus/packages/commit/d30ff737b84922d8ce8e073c680eaa79fb15f3d2)).\n- **unpaper** was updated to **7.0.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/da2c86bf999c3be2a11e739bd5d8dcc084d8fdd8)).\n- **utsushi** was updated to **3.65.0-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/be7457f3509983119e6f3a57d0dfa89b4cb82cbe)).\n- **v4l2loopback** was updated to **0.15.3-359** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dc3ed8963bdf46b914241e4ec75b3e794a799bb3), [@HarveyDevel](https://github.com/getsolus/packages/commit/dd8806f07a9275ab41f78e797aa5012cb46620aa)).\n- **vcmi** was updated to **1.7.4-37** ([@Jaredy899](https://github.com/getsolus/packages/commit/7655d3a67446578ee2dcdc489e00acd33f3c3617), [@Jaredy899](https://github.com/getsolus/packages/commit/6ec413170e044f5ddfe918dc0e518ace1197e7eb)).\n- **vdpauinfo** was updated to **1.5-6** ([@davidjharder](https://github.com/getsolus/packages/commit/cf618e2ce605cf0c343d87af2f75df8889d91f2a)).\n- **vhba-module** was updated to **20260313-317** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2a1fdb9f38155808c067f07746f93f4815e898ff), [@HarveyDevel](https://github.com/getsolus/packages/commit/bbb328a5219f4c7c85f6176816087aa896428d01)).\n- **vice** was updated to **3.10-18** ([@androidnisse](https://github.com/getsolus/packages/commit/b8c9e3a245df501bf6151aa47792dd0068c7beac)).\n- **vim** was updated to **9.2.0992-173** ([@davidjharder](https://github.com/getsolus/packages/commit/fbc99553d41ea3a18ec635d0a55d146341da83d0)).\n- **virt-viewer** was updated to **11.0-27** ([@davidjharder](https://github.com/getsolus/packages/commit/78a389b2e1cfaab94425b48e1b01209435c38f82)).\n- **virtualbox** was updated to **7.2.14-400** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f6d9091db63836b1160d855399acb5e3e014e874), [@clintre](https://github.com/getsolus/packages/commit/99b8ae33cb318d7bbc738aefded57718f393e13a)).\n- **visualboyadvance-m** was updated to **2.2.3-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/5c028ba41d218e5767059686ae622f0b8b712ac6)).\n- **vivaldi-stable** was updated to **8.1.4087.68-365** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8597f5f97349d0373e1c68b8e363c981e2b8ed06)).\n- **vlc** was updated to **3.0.23-203** ([@androidnisse](https://github.com/getsolus/packages/commit/aa5f19d9b2396914a70937e2791170871b41e557), [@davidjharder](https://github.com/getsolus/packages/commit/c0eeb077ef9c41cc4089c00fe1b7b4908ebf074e)).\n- **vorbis-tools** was updated to **1.4.3-10** ([@androidnisse](https://github.com/getsolus/packages/commit/226d168baa39c14e7ed35ed1277357d6a8732fa0)).\n- **vscode** was updated to **1.134.0-256** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ea1c6d66eefd70954def701d91d42e11fe8d3cf1)).\n- **wacomtablet** was updated to **6.7.4-64** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c1fb6464e18465180a1448141e6c790cb66228b9)).\n- **waydroid** was updated to **1.6.3-4** ([@clintre](https://github.com/getsolus/packages/commit/ce03ba58c66791005921410c4d3c1cbe7b293aea)).\n- **wesnoth** was updated to **1.18.7-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/b1c10a044daf482852c76aa774331a9c6941ad37)).\n- **wine** was updated to **11.15-217** ([@Jaredy899](https://github.com/getsolus/packages/commit/2746c73f4fd71975bce84affb8d3a01426015e35)).\n- **x264** was updated to **2025.06.08-21** ([@davidjharder](https://github.com/getsolus/packages/commit/05eb814c7b7d41e84bb93a5375eb01467829dd7e)).\n- **xdg-desktop-portal-kde** was updated to **6.7.4-134** ([@HarveyDevel](https://github.com/getsolus/packages/commit/32c8fef2f0b0cd25e581c2f33be2c126fb5a93e6)).\n- **xone** was updated to **0.5.8-129** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ffdaaa36beacfa4fbb1dff5ce4892f352595c8ec), [@HarveyDevel](https://github.com/getsolus/packages/commit/cef5105c6fb1aa20ca3787918c511594f341918d)).\n- **xrt** was updated to **2.21.75-3** ([@Jaredy899](https://github.com/getsolus/packages/commit/137d1f92980607a15d9c7393d6c60848863d73ba)).\n- **yakuake** was updated to **26.04.3-93** ([@HarveyDevel](https://github.com/getsolus/packages/commit/862acb31f88bb7c745b4b2e533ee878e253ee341)).\n- **yazi** was updated to **26.8.15-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/181308ee73331bd770e7407dbe9093964fbab679)).\n- **yelp-tools** was updated to **42.1-17** ([@davidjharder](https://github.com/getsolus/packages/commit/4b4bbe3fc73b4701eabe696ff03f7534b40d5070)).\n- **ypkg** was updated to **35.1.2-220** ([@joebonrichie](https://github.com/getsolus/packages/commit/718569feb6ddf0184463ec97f7e69f8fb470facd), [@joebonrichie](https://github.com/getsolus/packages/commit/475dbeb679612b8c14f7a836f26cddf9249fbdbf)).\n- **yt-dlp** was updated to **2026.08.19-274** ([@davidjharder](https://github.com/getsolus/packages/commit/4126ba7d7ab9cc814b7372ff4b8c3006bed7def5)).\n- **zeal** was updated to **0.9.1-29** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2a9c0981e276220d77bf7790b86c98c6f8fc6912)).\n- **zellij** was updated to **0.45.0-21** ([@EbonJaeger](https://github.com/getsolus/packages/commit/9f7c9bf06ef20a08230bb226a4b0e46168603724)).\n- **zenergy** was updated to **1.0.3-47** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7adffee901e01e22c1f16ed1404f6a24d14a9fcd), [@HarveyDevel](https://github.com/getsolus/packages/commit/f11020844e3598832f9dfc334bc58bfc1123bea3)).\n- **zip** was updated to **3.0-6** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a5d24084c0ee90edcfea4c1e683d98dca7994dc3)).\n- **zita-convolver** was updated to **4.0.3-5** ([@davidjharder](https://github.com/getsolus/packages/commit/1be45d979a19dfd8f2c799d5c8af03bfbbd746fe)).\n- **zita-resampler** was updated to **1.11.2-4** ([@davidjharder](https://github.com/getsolus/packages/commit/79ce5b4f310fd7a52ec0facd576e0dccf758591b)).\n", "creation_timestamp": "2026-08-21T22:43:14.416250Z"}, {"uuid": "931072d0-2e6a-4da4-8d6c-3a0e55340ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:08.165382Z"}, {"uuid": "15c04d94-b373-4a3b-a9fa-a14c761b2832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "69e8beac-f3b7-4570-be06-59a44b170c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "content": "", "creation_timestamp": "2026-06-02T00:00:00.000000Z"}, {"uuid": "e5ac24cb-08b1-4db0-83f0-540f69a48f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "d270f6a6-f664-41eb-88ec-6ff25a4496e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "0ab23d1d-9f53-4f10-8403-e7277bc809be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "46c2dd8b-7332-41a0-8329-c4acc61a20a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "cd632933-7d21-4870-9fee-9a5a30aa187f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "6ec4f1cf-19cc-42d1-a83a-926d8f330f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-06)", "content": "", "creation_timestamp": "2026-06-06T00:00:00.000000Z"}, {"uuid": "2dadd0b5-6625-4d48-bf00-cefd3dff0469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/devsecops_weekly/556", "content": "Arbitrary command execution \u0447\u0435\u0440\u0435\u0437\u2026 Snyk CLI\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0442 Imperva, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043d\u0430\u0448\u043b\u0430 CVE-2022-40764, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u00abarbitrary command execution\u00bb \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Snyk CLI.\n\n\u0421\u0442\u0430\u0442\u044c\u044f \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0432 \u0438 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0434\u044b\u0445\u0430\u043d\u0438\u0438! \u041f\u043e\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a\u043e\u0439 \u043f\u0443\u0442\u044c:\n\ud83c\udf6d Monkey patch \u0434\u043b\u044f Snyk CLI \u0441 \u0446\u0435\u043b\u044c\u044e \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 NodeJS \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0437\u0430\u043f\u0443\u0441\u043a shell)\n\ud83c\udf6d \u0414\u0430, \u0432\u0441\u0435 \u0442\u0430\u043a, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e shell \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f! \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0447\u0438\u043d\u044b: \u0444\u0430\u0439\u043b vendor.json \u0438 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u041f\u0435\u0440\u0432\u044b\u0439 payload, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u00ab\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438\u00bb \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u0410 \u0432\u043e\u0442 \u0432\u0442\u043e\u0440\u043e\u0439\u2026 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043b\u044c\u043a\u0443\u043b\u044f\u0442\u043e\u0440 \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f!\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0443 Snyk \u0435\u0441\u0442\u044c VS Code plugin, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 CLI \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 IDE. \u041e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u043b \u00ab\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0439\u00bb \u043a\u043e\u0434 \u0432 VS Code. PoC-\u0440\u043e\u043b\u0438\u043a, \u043f\u0440\u0438\u043c\u0435\u0440\u044b monkey patch, payload\u2019\u043e\u0432 \u0438 \u043a\u043e\u0434 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u044f ignore \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Snyk, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0444\u0435\u043a\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u0430\u0442\u0447 \ud83d\ude0a", "creation_timestamp": "2026-08-14T16:00:22.797423Z"}, {"uuid": "50e138cc-a0e5-46ef-a43b-090b1e9b8c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "627cecb9-509a-424c-a4b2-91284848b6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:07.470919Z"}, {"uuid": "5f12b145-413a-4b0f-90df-d176d766b2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "442eef29-7e3b-40d3-a002-a56aeb4a0190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "b6fa0dc1-552d-4446-987f-ef4afd267511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "96ca2a34-709a-49bf-aa37-bdda2548e124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "3f2e7385-e7bb-4c7a-aff4-eb87383f55aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-11)", "content": "", "creation_timestamp": "2026-06-11T00:00:00.000000Z"}, {"uuid": "03f5887d-16cb-4d86-923f-5579ceab5d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "content": "", "creation_timestamp": "2026-06-11T00:00:00.000000Z"}, {"uuid": "77a6c251-3d16-443c-a151-41ad56b2ddd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "e3c28471-0484-43cc-94d4-34199fff0ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-06T00:00:43.574119Z"}, {"uuid": "a3db0e5d-8e05-4f8c-834c-516060826d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "09b5f634-f04f-43b1-9608-da2c9dabd9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/patchdayalert.com/post/3moenbx6aqq2e", "content": "CVE-2022-40684 (Fortinet auth bypass): patching closes the hole but doesn't evict the attacker. They planted admin accounts before you patched. You need forensics after the fix, not instead of it.\n\npatchdayalert.com/blog/fortine...", "creation_timestamp": "2026-06-16T01:25:01.497834Z"}, {"uuid": "316032e7-63fb-46a0-bb14-b0853f695f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "73a74401-9747-495e-820c-816d9cc1f081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "00d0385f-522c-40b6-851b-6a1847a624eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "48ce1e3b-a545-4921-955f-428eaa4b221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "cc80d1a8-6703-4330-8f96-20ce3dc98b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "96167a1e-e027-46e4-9ba2-53817b9b8fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "a1d84471-6d3b-4d23-a3d6-36bebb70dff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "a0469d44-5ed3-4062-a725-b6b30786585d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bce73a88-990a-4c90-885b-348ee10b5da0", "content": "", "creation_timestamp": "2026-06-19T12:45:27.556760Z"}, {"uuid": "d94731e1-bf9c-4970-af61-11adaa3e032f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/febf34aa-70fd-4e26-baba-d8ae3c78fba0", "content": "", "creation_timestamp": "2026-06-19T12:45:38.620158Z"}, {"uuid": "6869c54c-18b6-41e7-b2e0-8af04b274d29", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d3b218fa-2741-4dfb-8b00-454435ce25ef", "content": "", "creation_timestamp": "2026-06-19T12:45:55.048603Z"}, {"uuid": "f2acb61a-9e45-42fb-88fb-81567010d036", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49a79885-400f-4b7a-922d-9bfe84807e0e", "content": "", "creation_timestamp": "2026-06-19T12:45:11.163432Z"}, {"uuid": "f779b3bf-bd14-4ae3-94c1-82e5965b7bb3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc0a66cd-19a6-45df-8aba-2fd42e8919fa", "content": "", "creation_timestamp": "2026-06-19T12:45:36.960966Z"}, {"uuid": "fd69500f-1b39-484f-96ff-050534a74e2e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/57d6b406-786c-43b2-90f6-72f3202fa666", "content": "", "creation_timestamp": "2026-06-19T12:45:53.256469Z"}, {"uuid": "e9f87f3c-9ae4-41d5-9efb-1644ffacfdad", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbb3bb9e-16e5-4c9f-8193-e29eb1cd44fc", "content": "", "creation_timestamp": "2026-06-19T12:46:13.728754Z"}, {"uuid": "a9c03040-f180-4a55-a848-8241b74673ec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/047f5376-beb6-4919-aa84-7a95b4983d5a", "content": "", "creation_timestamp": "2026-06-19T12:47:02.957491Z"}, {"uuid": "3e5ea517-becf-4370-a803-26f9c0f043d6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40734", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/341fa890-61c6-48ff-9ddd-13ef3124c184", "content": "", "creation_timestamp": "2026-06-19T12:47:04.194569Z"}, {"uuid": "70600e9c-99eb-4284-bfb6-3701d4cba534", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40769", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eca84cac-d6f9-4a01-8f21-2668e56c1b52", "content": "", "creation_timestamp": "2026-06-19T12:47:03.503458Z"}, {"uuid": "bf10529e-5c8c-48a8-a420-6907db46b2c7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddb856e5-47c8-407c-9698-c6efb46ed4ab", "content": "", "creation_timestamp": "2026-06-19T12:47:03.725439Z"}, {"uuid": "17ea1e37-bc3d-4a4f-a918-7c4122123179", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb02a8a-8213-4bf1-b456-da9fe852968c", "content": "", "creation_timestamp": "2026-06-19T12:46:59.115726Z"}, {"uuid": "6c46ebe2-eee0-4efd-8cca-75228386e007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "29cfdea2-d4d4-4d97-89de-4550278f33af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "74deb12a-1b5d-4a96-9d92-29bb474ff9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msfemxyvyz2s", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2022-40684: An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1\u2026\nCVSS 9.8 \u00b7 EPSS 100.0% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2022-40684\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-06T06:03:34.401807Z"}, {"uuid": "cb75ca63-e58d-4a96-843e-7f4b22f64f8d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8e722ff-91e0-46b2-8635-3cbab047bf99", "content": "", "creation_timestamp": "2026-06-23T14:03:06.790833Z"}, {"uuid": "d3996efb-ddbd-4c9c-85b3-46290a549d7a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31149564-8071-4cd2-b0c0-713fa6b5202e", "content": "", "creation_timestamp": "2026-06-23T14:03:05.613200Z"}, {"uuid": "507af094-ff69-4b68-875e-a4f4c92fbbe0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8af73a3a-c808-4b70-9dce-a7b8533445b9", "content": "", "creation_timestamp": "2026-06-23T14:03:01.980580Z"}, {"uuid": "767c2dfd-0b5f-45b2-9107-8a0459f3630a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffd1b413-610b-4c1e-aec1-aeaf9d9b7a21", "content": "", "creation_timestamp": "2026-06-23T14:03:19.002052Z"}, {"uuid": "a06c0264-6a4b-4bb9-8dfb-9f29dd81f02f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f36b5982-913f-4ea1-98c7-573b4cc034f4", "content": "", "creation_timestamp": "2026-06-23T14:03:20.170585Z"}, {"uuid": "9a164c4b-c747-45cc-b5b9-2152c867f671", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f2f84491-5303-41eb-bd62-f7ef099d584a", "content": "", "creation_timestamp": "2026-06-23T14:03:36.034417Z"}, {"uuid": "7f4622fd-30b3-4cf7-af8c-8fdc2b37bcca", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40619", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a829662d-9cfa-4bf8-9106-7d1ae5bf979b", "content": "", "creation_timestamp": "2026-06-23T14:03:56.796794Z"}, {"uuid": "9ec561bf-3390-45be-9527-fec40823bb72", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc1bc2bd-5fb0-4553-8c29-59646c7001ad", "content": "", "creation_timestamp": "2026-06-23T14:03:52.777818Z"}, {"uuid": "50bdf135-7f90-4310-85f1-602a67cf1b30", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40734", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a52062ee-8e06-42bd-948d-4bf02f1e9f75", "content": "", "creation_timestamp": "2026-06-23T14:04:05.433691Z"}, {"uuid": "68b54911-08fe-417c-9c9d-30ca33b53b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "d95c119f-a095-4b53-a6d9-cb4a47c4f725", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96d1cdaa-2e31-43c3-9c81-f79b5daccb90", "content": "", "creation_timestamp": "2026-06-23T14:05:33.956699Z"}, {"uuid": "f6edd272-7136-4072-a2fb-88a14478ddc7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a6100c10-469c-425a-9b92-69a895a0cd0a", "content": "", "creation_timestamp": "2026-06-23T14:05:37.307253Z"}, {"uuid": "0cee5bbd-94b3-44c5-a4e6-b1485ec96b9c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40139", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2d5e83e-1ed8-4864-aa26-b7b858d63057", "content": "", "creation_timestamp": "2026-06-23T14:05:33.461502Z"}, {"uuid": "4edde755-6f20-4efc-b38c-e8853e1ccbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "54ff4c0e-d5a2-45dd-9474-9af3524d1fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd", "content": "StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader\nIntroduction\nDuring our research of activity affecting a diplomatic organization in Indonesia, we uncovered a previously undocumented malware family that we have named SharkLoader. What initially appeared to be an isolated case quickly expanded into a broader campaign as we identified additional SharkLoader infections across multiple countries and sectors.\nOur investigation revealed that SharkLoader serves as a loader designed to deploy Cobalt Strike Beacon on compromised systems. We observed the threat actor deploying SharkLoader through exploitation of internet-facing applications, including Microsoft Exchange, Microsoft SharePoint, and Openfire Server, as well as through malware-based delivery mechanisms.\nBeyond the diplomatic entity in Indonesia, we identified related activity targeting government organizations in Taiwan, software development companies across multiple countries, and entities in other sectors located in Hong Kong, Lebanon, Syria, Colombia, North Macedonia, Nepal, Serbia, and more. The observed victimology suggests a campaign with broad geographic reach and a diverse target set rather than a narrow focus on a specific industry or region.\nFor now, we are tracking this activity as StrikeShark. Although the operators utilize several open-source post-compromise tools associated with Chinese-speaking developers, we have not identified direct code reuse, infrastructure overlap, or operational similarity to confidently attribute the activity to any known APT or cybercrime group. As a result, attribution remains preliminary and the campaign\u2019s ultimate objectives are still under research.\nInitial infection\nOur analysis of SharkLoader intrusions indicates that the threat actor employs multiple methods to gain initial access to victim environments. During our investigation, we observed two primary infection vectors: the exploitation of vulnerabilities in internet-facing applications and the deployment of custom dropper samples, some of which were disguised as legitimate software.\nExploitation of public-facing applications\nIn the incident affecting an Indonesian diplomatic entity, the threat actor exploited Microsoft Exchange vulnerabilities, including CVE-2021-26855 (ProxyLogon), to gain access to the target environment. Similar activity was observed in Taiwan, where software development organizations were compromised through exploitation of Openfire (CVE-2023-32315). In a separate incident affecting a Colombian organization, the threat actor exploited a GeoServer instance vulnerable to CVE-2024-36401.\nBeyond these incidents, we identified additional exploitation activity targeting vulnerabilities in multiple internet-facing enterprise applications and network appliances including those listed below:\nRemote Code Execution (RCE)\n\nApache Shiro: CVE-2016-4437\nHikvision Products: CVE-2021-36260\nMicrosoft SharePoint: CVE-2021-27076\nZimbra Collaboration Suite: CVE-2022-27925\nMicrosoft Exchange Server: CVE-2022-41082\nF5 BIG-IP system: CVE-2023-46747\nFortinet FortiOS: CVE-2024-21762\nReact Server Components: CVE-2025-55182\nAuthentication Bypass\n\nFortinet FortiOS: CVE-2022-40684\nCisco IOS XE Web UI: CVE-2023-20198\nAs of the time of writing this article, we haven\u2019t obtained the exploits the attackers used. However, based on the vulnerabilities observed across multiple attacks, we assess with medium confidence that the threat actor primarily relies on publicly available proof-of-concept (PoC) exploits to gain initial access. All the vulnerabilities identified during our investigation have publicly available exploit code, including PoCs hosted on GitHub and other open-source platforms, suggesting the actor leverages existing offensive resources rather than develops custom exploit capabilities. The victim profile also indicates that the activity is largely opportunistic, affecting organizations across various industries, regions, and technology environments without a clear focus on a specific target set. Also, one of the IP addresses associated with the C2 domain was also observed conducting internet-wide scanning activity, potentially aimed at identifying and exploiting vulnerable internet-facing systems at scale.\nFollowing exploitation, the attacker established persistence on compromised servers through the deployment of webshells. Although we were unable to recover the webshell files, a series of commands whose execution we observed in our telemetry along with the detection records of webshells strongly indicate their use for post-exploitation activities.\nOne of the earliest observed actions involved copying the legitimate Windows application SystemSettings.exe to a new location before executing it.cd C:\\Windows\\ImmersiveControlPanel\\copy SystemSettings.exe C:\\ProgramData\\cd C:\\ProgramData\\SystemSettings.exeThis application was later abused as part of a DLL sideloading chain used to launch SharkLoader, which in this scenario was hidden in the malicious SystemSettings.dll library. We suspect that this DLL along with malicious encrypted files, which we\u2019ll describe further, was uploaded through the webshell to the same directory as SystemSettings.exe.\nIn another case involving the exploitation of CVE-2021-27076, the threat actor launched SystemSettings.exe triggering the subsequent SharkLoader sideloading chain from different directories on the system, which suggests renewed operational activity in the victim environment. In some of the cases, they used security product vendor names as the directory names, allegedly to appear legitimate.cd C:\\ProgramData\\KasperskyLab\\dir.\\SystemSettings.execd %APPDATA%dircd kasperskylabdir.\\SystemSettings.exe\nDropper-based distribution\nIn several observed cases, the threat actor distributed SharkLoader through custom dropper executables masquerading as legitimate software installers or applications such as Google Update and Cisco AnyConnect. However, the exact delivery mechanism used to distribute these droppers remains unknown.\nThe observed dropper filenames include:\n\nGoogleUpdateStepup.exe\nAnyConnect-win-4.10.04071-predeploy-k9exe\nAutoUpdate.exe\n319-pfd-8001-reva_traitement biologique_master.zip\nIn one of the samples we analyzed, the threat actor used a legitimate Cisco AnyConnect VPN installer as a lure. The custom dropper extracted zlib-compressed data embedded within its resource section, decompressed it into an MSI package, and wrote the file to %APPDATA%\\reports\\AnyConnect-win-4.msi. The MSI package was a legitimate Cisco AnyConnect VPN installer, which was subsequently executed via the ShellExecuteW API, making the user believe the custom dropper was a legitimate application.\nWhile the Cisco AnyConnect installer was decompressed and executed, SharkLoader components were silently dropped into directories in %APPDATA% different from %APPDATA%\\reports\\ in the background, executing the malware loader once the installation process completes.\nMalicious Cisco Secure Client installer\nIn addition to installer-themed lures, several SharkLoader droppers use decoy PDF documents to persuade victims to open the malicious file. However, not all samples employ this technique, as some droppers function solely as a delivery mechanism for SharkLoader without presenting any lure content.\nAmong the samples analyzed, most droppers write the decoy PDF to a subdirectory named aswerf within the %TEMP% directory, while others save the document directly to %TEMP%.\nAnalysing the sample shows the PDF files are stored within the dropper\u2019s resource section under the resource name TELEMETRY and are compressed with zlib. Upon execution, the dropper extracts and decompresses the embedded PDF, writes it to disk using the same filename as the dropper executable but with a PDF extension, and launches it via cmd.exe /c  to display the decoy document to the victim.\nThe following are examples of PDF documents extracted and displayed by the droppers during the deployment of SharkLoader.\nLure document 1. The document appears to be related to a biological treatment process and was produced by an engineering consultant\nLure Document 2. Translated title: Liquid Rocket Engine Design Program\nIn one dropper sample, discovered on a machine located in Lebanon (MD5: 1F65544978B8EA0E745E573B8EE9684B), the dropper extracts and decompresses SystemSettings.dll from zlib-compressed data embedded within the binary and writes it to %APPDATA%\\xwreg. It also extracts and decompresses DscCoreR.mui and SyncRest.dat from resources named VAULTSVCD and UMRDPRDAT, respectively, and writes them to the same directory.\nThe dropper extracts SystemSettings.dll from the binary and retrieves encrypted components from the resource section\nThe dropper then copies the legitimate SystemSettings.exe application from C:\\Windows\\ImmersiveControlPanel to the target location to facilitate DLL sideloading. Across other SharkLoader dropper samples analyzed, the malware components were observed being written to either %APPDATA%\\xwreg or %APPDATA%\\xgdf.\nSharkLoader installation\nSharkLoader is composed of multiple components that work together to load and execute the final implant, a Cobalt Strike Beacon.FilenameDescriptionSystemSettings.exeLegitimate Windows application abused for DLL side-loading of themalicious DLL SystemSettings.dll.SystemSettings.dllMain malicious SharkLoader DLL responsible for the core loader functionality.DscCoreR.muiAn encrypted module that contains an embedded Cobalt Strike Beacon and the MinHook library. This module loads SyncRes.dat, installs a couple of API hooks, and executes the Beacon directly in memory.SyncRes.datAn encrypted DLL that is used to install multiple API hooks.\nWhile the majority of SharkLoader samples analyzed rely on the sideloading of SystemSettings.dll, other variants leverage alternative DLL side-loading targets, including msedge.dll, PrintDialog.dll, and miracastview.dll, each of them leveraging a corresponding legitimate application.\nAcross the different variants examined, the encrypted modules were also observed using a variety of filenames, including:GameInputInboxs32.muidiagerr.xmlNtfsLog.etlIgnored.DatVistaCompat.nlsThe SharkLoader execution flow is as follows:\nSharkLoader infection chain observed in the StrikeShark campaign\nIn the dropper-based infections, after deploying all required SharkLoader components, the dropper creates two scheduled tasks through the Windows Task Scheduler COM interfaces. Task names:\n\nOneDrive Standalone Update Task-S-1-5-21-4165425321-4153752593-2322023643-1000\nMicrosoftUpdateTaskUserS-1-5-32-2456537112-101246289-228944324-1000\nBoth tasks are configured to execute the copied SystemSettings.exe from the malware\u2019s working directory (for example, %APPDATA%\\xwreg or %APPDATA%\\xgdf), triggering the side-loading of the malicious SharkLoader DLL.\nThe first scheduled task uses a time-based trigger that executes every five minutes, providing long-term persistence.\nThe second task is configured to execute every second, likely to ensure immediate execution of SharkLoader following deployment.\nAfter a delay of approximately 1.5 seconds, the dropper removes the second scheduled task by using the Task Scheduler COM interfaces, leaving the first task in place to maintain persistence on the system.\nSharkLoader DLL \u2013 Main implant\nFor the detailed analysis of the infection chain, we\u2019ll focus on the SharkLoader components deployed by a malicious dropper named \u4e00\u79cd\u5f02\u5e38\u72b6\u51b5\u7684\u622a\u56fe\uff08\u5305\u62ec\u64cd\u4f5c\u7cfb\u7edf\u548c\u8f93\u5165\u6cd5\u7248\u672c\uff09.pdf.exe (MD5: 24FCEBDEECBA65004FDB0923763D74FD), which was identified in a campaign targeting a government entity in Taiwan.FilenameMD5SystemSettings.exeD98F568496512E4F98670C61C97CB07ASystemSettings.dllAA3086BE652C8B20B0B29B2730D57119DscCoreR.muiA514D1BB62D7916475946FE7C07AC0AASyncRest.dat9CBD560F820C95D7C38342CD558CB5C6\n\u201cPerfectDLL Hijacking\u201d technique\nOnce the malicious DLL is loaded, SharkLoader implements a technique commonly referred to as \u201cPerfect DLL Hijacking\u201d and originally described by a security researcher named Elliot Killick on his blog. The purpose of this technique is to bypass the Windows loader lock and safely create a malicious thread via the CreateThread API without risking a deadlock.\nAccording to Microsoft\u2019s Dynamic-Link Library Best Practices, the Windows loader holds a synchronization object known as the \u201cloader lock\u201d while executing the DllMain function. This mechanism ensures that only one thread can perform DLL loading and initialization operations within a process at any given time. As a result, invoking APIs such as CreateThread or LoadLibrary from within DllMain can lead to deadlocks because the loader lock remains held throughout the execution of the function.\nTo avoid this issue, SharkLoader manipulates the process\u2019s internal loader state to release the loader lock before invoking CreateThread from the DllMain execution path. By doing so, it attempts to execute its malicious code without triggering the loader-related deadlocks that can occur when threads are created while the loader lock remains held.\nImplementation of the Perfect DLL Hijacking technique to bypass the Windows Loader Lock\nBased on the code, SharkLoader first resolves the addresses of several undocumented loader structures within ntdll.dll, including:\n\nLdrpLoaderLock: the critical section object used by the Windows loader to synchronize module loading and initialization operations\nLdrpWorkInProgress: an internal loader state variable that tracks whether module initialization is currently in progress\nAfter locating these structures, SharkLoader forcefully releases the loader lock by invoking LeaveCriticalSection on LdrpLoaderLock. It then decrements the value of LdrpWorkInProgress with InterlockedDecrement64, effectively marking the initialization process as complete.\nFinally, the malware signals the loader completion event via SetEvent before creating a new thread to execute its malicious functionality. As a result, these actions manipulate the loader\u2019s internal state and cause Windows to treat the DLL initialization process as having completed successfully. This allows SharkLoader to continue execution after forcefully releasing the loader lock, despite still operating from within the DllMain execution path.\nDecryption and loading of >DscCoreR.mui\nAs shown in the previous section, the loader creates a new thread after escaping the Windows loader lock. This thread subsequently spawns a second thread responsible for decrypting and reflectively loading the encrypted file, DscCoreR.mui.\nThe routine first reads the encrypted file into memory and extracts the first 16 bytes to use as the Blowfish decryption key. It then initializes the Blowfish cipher by using custom P-array and S-box constants embedded in the loader and decrypts the file in ECB mode with the extracted key. Once decryption is complete, the resulting PE file is reflectively loaded into memory and executed without being written to disk.\nStructure of the encrypted DscCoreR.mui file containing the 16-byte Blowfish key bytes followed by the encrypted PE bytes\nThe decrypted DscCoreR.mui file is a packed PE file with its MZ header removed, likely as an anti-analysis measure. After decryption, SharkLoader processes the PE image by parsing its headers, allocating memory for the image, mapping its sections, applying relocations, resolving imported functions, and setting the appropriate memory protections. Once the in-memory PE loading process is complete, the main loader, SystemSettings.dll, transfers execution to the entry point of the mapped image, which contains the packer stub.\nThe stub then unpacks the protected code, invokes the DLL\u2019s DllMain function, and returns execution to SystemSettings.dll. Finally, SystemSettings.dll calls the exported function SetUserProcessPriorityBoost from the mapped DLL, triggering execution of the fully unpacked next-stage DLL.\nDscCoreR.mui and SyncRes.dat DLLs\nWithin the decrypted and unpacked DscCoreR.mui code, the malware proceeds to load and decrypt a second encrypted file, SyncRes.dat, before reflectively loading the resulting DLL into memory.\nThe mapped DLL installs multiple API hooks by using Microsoft Detours, which will be discussed in the next section.\nAfter mapping and loading SyncRes.dat for API hooks, the DscCoreR.mui performs installation of the Vectored Exception Handler (VEH) and then creates a thread in a suspended state that is later used to execute the Cobalt Strike Beacon shellcode. Additionally, to facilitate additional API hooks, it decompresses and loads the MinHook library and uses it to install hooks on the VirtualAlloc and Sleep APIs.\nThe DscCoreR.mui then decompresses the Cobalt Strike Beacon shellcode into the memory region associated with the suspended thread and then the suspended thread is resumed, resulting in execution of the beacon.\nDecryption and loading of SyncRes.dat\nTo decrypt SyncRes.dat, the malware extracts a 16-byte AES-128 key and a 16-byte initialization vector (IV) directly from the file itself. The first 16 bytes of the file contain the AES key, while the subsequent 16 bytes contain the IV. The remaining file content consists of AES-encrypted data, which is decrypted using the extracted key and IV. Once decrypted, the resulting data reveals a PE image with its MZ header removed, similar to DscCoreR.mui.\nStructure of the encrypted SyncRes.dat file showing the AES key, IV, and encrypted PE bytes\nSimilar to the decrypted DscCoreR.mui module, the decrypted SyncRes.dat file is also protected by an unknown custom packer. After decryption, the loader reflectively loads the PE image before transferring execution to the module\u2019s entry point.\nThe entry point contains a packer stub responsible for unpacking the protected code in memory. Once the unpacking routine is complete, the malware invokes a specific exported function named StartEngineData, which serves as the primary execution routine of the third-stage DLL.\nBefore continuing with the DscCoreR.mui analysis, we will first discuss SyncRes.dat.\nSyncRes.dat decrypted DLL: Multiple API hooks\nThe decrypted and unpacked SyncRes.dat DLL is primarily responsible for installing multiple Windows API hooks by using the Microsoft Detours library. After attaching all detour hooks, it calls DetourTransactionCommitEx to apply them in one commit.\nThe following table lists the hooked Windows APIs and their corresponding hook handler functions.Hooked Windows APIsDetour function descriptionCreateProcessA\n\nSaves all original CreateProcessA parameters for use in the parent process (PPID) spoofing routine.\nCreates a new thread that executes the process creation routine responsible for PPID spoofing.\n\nFalls back to the original CreateProcessA if the thread creation fails.\n\nIdentifies an svchost.exe process that has the same security context as the current SharkLoader process.\nBuilds an extended startup attribute list to set the selected svchost.exe as the spoofed parent.\nCalls the original CreateProcessA with the modified parent attribute.\nAs a result, any new process created by the current process (primarily from the Cobalt Strike beacon) is spawned under svchost.exe instead of the current module process.CreateProcessW\n\nSaves all original CreateProcessW  parameters for use in the PPID spoofing routine, which is executed through an APC-based mechanism rather than a dedicated thread compared to the CreateProcessA API hook.\nSchedules a delayed process creation (10 microseconds) through APC execution using CreateWaitableTimerW  and SleepEx.\n\nThe timer callback performs the svchost.exe PPID spoofing logic, similar to the CreateProcessA spoofing routine.\n\nAs a result, new processes created via CreateProcessW by the current process (primarily from the Cobalt Strike beacon) are launched under svchost.exe through an APC-based execution mechanismOpenProcessToken\n\nOnce hooked, the malware initializes jitasm to construct a direct syscall stub for NtOpenProcessToken at runtime.\nInvokes NtOpenProcessToken through the constructed direct syscall stub, redirecting the original API (OpenProcessToken) call flow.AdjustTokenPrivileges\n\nRedirects the API call to a direct NtAdjustPrivilegesToken syscall stub constructed by jitasm.OpenProcess\n\nRedirects the API call to a direct NtOpenProcess syscall stub constructed by jitasm.WriteProcessMemory\n\nRedirects the API call to a direct NtWriteVirtualMemory syscall stub constructed by jitasm.NtCreateUserProcess\n\nRedirects the API call to a direct NtCreateUserProcess syscall stub constructed by jitasm.LoadLibraryA\n\nRedirects the API call to a function that resolves LdrLoadDll API using a ROR13-based API hashing algorithm.\nUses the original parameters to invoke LdrLoadDll directly.\nIf LdrLoadDll resolution or invocation fails, uses CreateTimerQueue and CreateTimerQueueTimer to schedule a 10-millisecond delayed execution of the original LoadLibraryA, with CreateEventW used for synchronization.GetModuleHandleA\n\nRedirects the API call to a custom function that resolves the module base address through the following steps:\n\nEnumerates loaded modules within the current process using CreateToolhelp32Snapshot, Module32FirstW, and Module32NextW.\nCompares each enumerated module name with the module name provided in the API parameter.\nReturns the module base address if a match is found.\n\nFalls back to the original GetModuleHandleA API if the custom resolution routine fails.GetModuleHandleW\n\nSimilar approach to the GetModuleHandleA API hooks above.GetProcAddress\n\nThe original GetProcAddress parameters are passed to the hook handler.\nThe hook handler computes a Murmur32 hash of the requested function name.\nThe hook handler parses the module\u2019s PE structure and locates the export table.\nEach exported function name is hashed using the same Murmur32 algorithm and compared against the previously generated hash.\nIf a hash match is found, the corresponding function address is returned. If no match is found, the call falls back to the original GetProcAddress.LoadLibraryExA\n\nThe hook handler redirects the API call to its original address. In short, the hooked LoadLibraryExA calls the original LoadLibraryExA function.VirtualAllocEx\n\nRedirects the API call to a direct NtAllocateVirtualMemory syscall stub constructed by jitasm.VirtualProtectEx\n\nRedirects the API call to a direct NtProtectVirtualMemory syscall stub constructed by jitasm.VirtualProtect\n\nRedirects the API call to a direct NtProtectVirtualMemory syscall stub constructed by jitasm.ResumeThread\n\nRedirects the API call to a direct NtResumeThread syscall stub constructed by jitasm.GetThreadContext\n\nRedirects the API call to a direct NtGetContextThread syscall stub constructed by jitasm.OpenThread\n\nRedirects the API call to a direct NtOpenThread syscall stub constructed by jitasm.NtCreateThread\n\nRedirects the API call to a direct NtCreateThread syscall stub constructed by jitasm.NtCreateThreadEx\n\nRedirects the API call to a direct NtCreateThreadEx syscall stub constructed by jitasm.NtQueueApcThread\n\nRedirects the API call to a direct NtQueueApcThread syscall stub constructed by jitasm.NtQueueApcThreadEx\n\nRedirects the API call to a direct NtQueueApcThreadEx syscall stub constructed by jitasm.ExpandEnvironmentStringsA\n\nThe detour redirects the API to a custom function that creates a new thread. That thread executes a routine that calls the ExpandEnvironmentStringsA API.CreateFileMappingA\n\nThe detour redirects the API call to a custom function that creates a new thread. Within the thread, it initializes thread-pool and timer objects, sets a threadpool timer for 10 ms and a waitable timer for 0.1 ms, then calls CreateFileMappingNumaA.\nIf thread creation fails, CreateFileMappingNumaA is called directly without creating a thread.MapViewOfFile\n\nThe detour redirects the API call to a custom function that creates a new thread. The thread runs a similar thread-pool and timer setup to the previous function, resolves MapViewOfFileEx via GetProcAddress, calls it with zeroed arguments, and stores the return value.UnmapViewOfFile\n\nThe detour redirects the API to a function that tries to run the unmap (same API) in a new thread.\nThe thread creates an event and timer queue, schedules a callback after 10 ms to call UnmapViewOfFile and signal the event, then waits and cleans up.\nIf thread creation fails, it calls UnmapViewOfFile directly.NtMapViewOfSectionEx\n\nRedirects the API call to a direct NtMapViewOfSectionEx syscall stub constructed by jitasm.NtCreateNamedPipeFile\n\nRedirects the API call to a direct NtCreateNamedPipeFile syscall stub constructed by jitasm.NtReadFile\n\nRedirects the API call to a direct NtReadFile syscall stub constructed by jitasm.NtWriteFile\n\nRedirects the API call to a direct NtWriteFile syscall stub constructed by jitasm.EtwEventWrite\n\nThe detour redirects EtwEventWrite to a stub that always returns 1, which prevents ETW logging.EventWriteEx\n\nThe detour redirects EventWriteEx to a function that always returns 0, which prevents ETW logging.EventWrite\n\nThe detour redirects EventWrite to a function that always returns 0, which prevents ETW logging.\nUpon completing the installation of API hooks via the decrypted SyncRes.dat, the DscCoreR.mui DLL proceeds with the remaining functions, which are discussed below.\nVEH registration and access violation handling\nFollowing the installation of the API hooks, the malware registers a Vectored Exception Handler (VEH) to monitor exceptions generated during runtime. The handler specifically checks for access violation exceptions (0xC0000005). When such an exception occurs, it retrieves the faulting memory address from the exception record and calls VirtualProtect to restore read, write, and execute (RWX) permissions to the corresponding memory page before resuming execution.\nDuring our analysis, no access violations were observed. It is possible that this mechanism is intended to handle access violations that may occur under specific runtime conditions.\nThread creation for Cobalt Strike Beacon execution\nThe malware creates a new thread in a suspended state that is intended to execute the Cobalt Strike Beacon shellcode. The thread entry point is configured to point to a memory buffer that will later contain the beacon shellcode.\nAt this stage, the buffer does not yet contain the actual Cobalt Strike Beacon shellcode. Instead, the thread is created in a suspended state so that the malware can prepare and inject the shellcode into the buffer before execution. Once the beacon payload has been written into the buffer, the malware resumes the suspended thread using the ResumeThread API, which triggers the execution of the Cobalt Strike beacon.\nMinHook DLL, API hooking, and Cobalt Strike beacon\nAfter creating the suspended thread for beacon execution, the malware decompresses a zlib-compressed MinHook PE file embedded within DscCoreR.mui. The MinHook library is used to install API hooks for the VirtualAlloc and Sleep functions. Once the MinHook DLL is decompressed and loaded into memory, the malware resolves the exported functions MH_Initialize and MH_CreateHook, which are then used to install hooks on the VirtualAlloc and Sleep APIs.\nAfter the hooks are installed, the malware invokes a function that decompresses a zlib-compressed Cobalt Strike Beacon shellcode embedded within the malware. The function first decompresses the shellcode into a temporary buffer and then allocates executable memory using VirtualAlloc with RWX permissions. The decompressed beacon is subsequently copied into the allocated memory region.\nBecause the VirtualAlloc API has already been hooked at this stage, the hook handler captures the address and size of the allocated memory used to store the beacon shellcode. The hook records the addresses and sizes of the first three successful memory allocations and stores these values in global variables to track specific memory regions allocated during execution. These tracked regions are associated with memory buffers used by the Cobalt Strike Beacon during runtime.\nThe second hook, on the Sleep API, is used when Cobalt Strike Beacon calls Sleep, such as during beacon sleep intervals. It temporarily modifies the memory protection of the tracked allocation regions by using VirtualProtect, changing their protection to PAGE_READWRITE (RW) before invoking the original Sleep function. After the sleep period ends, the malware restores the memory protection of those regions to PAGE_EXECUTE_READWRITE (RWX). This behavior suggests that the malware developer implemented this mechanism to evade memory scanning techniques that identify executable (RWX) code regions in memory.\nFinally, after the API hooks are installed and the Cobalt Strike Beacon shellcode has been written to the thread buffer, the malware calls the ResumeThread API to resume the suspended thread and begin execution of the beacon.\nPersistence mechanism\nWhile the analyzed SharkLoader implant does not contain a built-in persistence mechanism especially when it comes to cases when it is dropped after the exploitation of a public-facing application, our investigations revealed that the threat actor employs several techniques to maintain access to compromised systems.\nRegistry Run key: In the incident that affected an organization in Hong Kong, the attacker manually created a registry Run key to launch SystemSettings.exe upon user logon. The following command was used:reg add HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run /v \"MFUpdate\" /t REG_SZ /d \"$appdata\\Identities\\SystemSettings.exe\" /fThis technique allows the malware to automatically execute whenever the user logs in, ensuring persistent access.\nScheduled task: In the separate compromise that affected a diplomatic government entity in Indonesia, the attacker established persistence through a scheduled task configured to execute SharkLoader daily. The task, named \"\\Microsoft\\Windows\\Edge\\Edgeupdate\", was configured to run C:\\ADriveLogs_Logs\\SystemSettings.exe by using the following command:Schtasks /create /s /u \"\" /p \"\" /ru \"SYSTEM\" /tn \"\\Microsoft\\Windows\\Edge\\Edgeupdate\" /sc DAILY /tr \"C:\\ADriveLogs_Logs\\SystemSettings.exe /F\"Running the task with SYSTEM privileges ensures that SharkLoader executes even if no user is logged in.\nPost-compromise activity\nFollowing initial compromise and persistence, the attacker engaged in extensive reconnaissance and credential theft activities.\nSystem information enumeration: The attacker initially gathered basic system information by using the following commands:systeminfoipconfig /alltasklist /svcPost-exploitation tools: Our analysis revealed the use of several third-party post-exploitation tools, most of which are open-source and developed by Chinese-speaking developers. These tools included:Tool nameDescriptionFScanNetwork scanner tool with vulnerabilityexploitation modulesSearchallSensitive information search toolPillagerInformation gathering tool\nWe also detected the use of SharpGPOAbuse by the threat actor, a tool designed to modify Group Policy Objects within Active Directory environments.\nActive Directory enumeration: In the compromise affecting a diplomatic government entity in Indonesia, the attacker used both Cobalt Strike and a webshell to enumerate the internal Active Directory environment. They executed a series of commands to gather information about the network, users, and groups:\n\nNetwork information:ping -nnetstat -anoarp -anet share\nUser and group information:query usernslookupqusernet group /domain\nSpecific group membership:powershell \"Get-ADGroupMember -Identity \"\" -Recursive | Select-Object Name, ObjectClass\"dsquery group -name \"\" | dsget group -members -expand | dsget user -samid -display -email\"powershell \"Get-ADGroupMember -Identity \"\" -Recursive | Where-Object { $_.ObjectClass -eq \"computer\" } | Select-Object Name, SamAccountName\"powershell -exec bypass -c \"Get-ADUser -Filter * -Prop * | select sAMAccountNamenet group \"Domain Controllers\" /domainnet group \"Enterprise Admins\" /domainnet group \"Organization Management\" /domainnet group \"domain admins\" /domain\nProcess enumeration:tasklist /SVC | findstr $selfname.exe\nDirectory listing:\ndir \\\\c$dir \\\\c$\\inetpubdir \\\\c$\\inetpub\\custerrdir \\\\c$\\inetpub\\wwwroot\\Credential dumping: The attacker also attempted to dump credentials from the compromised machine by targeting both the LSASS process and the NTDS database file. The following commands were observed:ntdsutil \"ac i ntds\" \"ifm\" \"create full $temp\" q qProcdump64.exe -accepteula -ma lsass.exe $temp\\lsass.dmpDumping the LSASS process allows the attacker to extract in-memory credentials, while accessing the NTDS database enables retrieval of Active Directory account password hashes. This combination of techniques allows the attacker to obtain privileged credentials for lateral movement, privilege escalation, and deeper compromise.\nVictimology\nThe victimology observed in this campaign shows a combination of strategic and opportunistic characteristics. Confirmed victims include government-related entities, such as the ministry in Taiwan and the diplomatic organization in Indonesia, as well as software development companies in Taiwan, Lebanon, and Syria. Additional affected organizations were identified in Hong Kong, Colombia, Macedonia, Nepal, and Serbia.\nTargeting of government and software development organizations may indicate a cyber-espionage objective, although our confidence remains low due to the limited post-compromise activity observed, which primarily consisted of credential access, system reconnaissance, and lateral movement. The compromise of government and software development organizations could indicate an interest in gathering political intelligence or intellectual property.\nAt the same time, the use of SharkLoader and Cobalt Strike, alongside the exploitation of public-facing applications and malicious installers and droppers, suggests the attacker may also be opportunistically targeting vulnerable systems. The absence of clear evidence of data exfiltration thus far does not exclude this possibility, as Cobalt Strike\u2019s file operation and data exfiltration modules could be employed at a later stage.\nAlthough the full scope of the campaign is not yet known, the combination of targeted and opportunistic activity suggests it should continue to be closely monitored.\nAttribution\nOur investigation reveals no code or infrastructure overlap linking SharkLoader to any existing threat actor at this time. The TTPs employed during the operation also do not align with those of known actors.\nHowever, analysis of the post-exploitation open-source tools used during the campaign revealed that several reconnaissance tools, including FScan, Searchall, and Pillager, were developed by individuals identified as Chinese speaking developers on GitHub.\nWe assess StrikeShark to be a Chinese-speaking threat actor with low confidence. This assessment is based on limited indicators and should be considered preliminary. Further investigation is required to characterize this cluster more fully, and the possibility remains that other actors may also be utilizing these tools.\nConclusion\nOur investigation discovered a previously undocumented intrusion cluster that we are tracking as StrikeShark. The StrikeShark campaign represents a sophisticated malware threat to entities worldwide. The use of SharkLoader to deploy Cobalt Strike, coupled with API hook installation to evade detection, demonstrates a significant level of technical expertise. The campaign\u2019s broad targeting across sectors and geographic regions suggests a potential focus on espionage or information gathering. While the precise objectives remain under investigation, the combination of targeting government entities and software developers warrants heightened vigilance.\nGiven that our visibility is limited to incidents observed through Kaspersky telemetry, we suspect the actual number of compromises may be significantly higher and extend beyond these victims as the threat actor actively used several exploitations of public facing application.\nIndicators of compromise\nAdditional information about this activity, including indicators of compromise, is available to customers of the Kaspersky Intelligence Reporting Service. If you are interested, please contact intelreports@kaspersky.com.\nC559CC68986933200FD5D9E4388E2F58                    InstallerB3352B42432DEDC4A519F011DC8B5D5A                  Dropper24FCEBDEECBA65004FDB0923763D74FD                  Dropper9C872A0D5D5A38950E8B9AC9B488BE3F                  SharkLoader DLLAA3086BE652C8B20B0B29B2730D57119                   SharkLoader DLLA514D1BB62D7916475946FE7C07AC0AA                  Encrypted file9CBD560F820C95D7C38342CD558CB5C6                  Encrypted fileconnect-microsoft[.]comms-record[.]comms-record[.]topms-tray[.]top \nsecurelist.com/strikeshark-cam\u2026", "creation_timestamp": "2026-06-25T06:34:32.119004Z"}, {"uuid": "8579a7db-6a0a-4c33-a852-28846fb7f213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:00:04.261836Z"}, {"uuid": "fe3cd21d-684b-4e8c-a490-b38f1e4f5303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:15:25.348867Z"}, {"uuid": "d4a043a0-0fce-4514-845f-64f1be93ae52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:00:03.729208Z"}, {"uuid": "5aa9cbd5-c9eb-4067-b477-2c421ac0eec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:00:03.713101Z"}, {"uuid": "0c3cd067-634f-46c7-b1b9-2d3432cf3684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "seen", "source": "https://t.me/devsecops_weekly/556", "content": "Arbitrary command execution \u0447\u0435\u0440\u0435\u0437\u2026 Snyk CLI\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0442 Imperva, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043d\u0430\u0448\u043b\u0430 CVE-2022-40764, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u00abarbitrary command execution\u00bb \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Snyk CLI.\n\n\u0421\u0442\u0430\u0442\u044c\u044f \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0432 \u0438 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0434\u044b\u0445\u0430\u043d\u0438\u0438! \u041f\u043e\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a\u043e\u0439 \u043f\u0443\u0442\u044c:\n\ud83c\udf6d Monkey patch \u0434\u043b\u044f Snyk CLI \u0441 \u0446\u0435\u043b\u044c\u044e \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 NodeJS \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0437\u0430\u043f\u0443\u0441\u043a shell)\n\ud83c\udf6d \u0414\u0430, \u0432\u0441\u0435 \u0442\u0430\u043a, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e shell \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f! \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0447\u0438\u043d\u044b: \u0444\u0430\u0439\u043b vendor.json \u0438 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u041f\u0435\u0440\u0432\u044b\u0439 payload, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u00ab\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438\u00bb \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u0410 \u0432\u043e\u0442 \u0432\u0442\u043e\u0440\u043e\u0439\u2026 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043b\u044c\u043a\u0443\u043b\u044f\u0442\u043e\u0440 \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f!\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0443 Snyk \u0435\u0441\u0442\u044c VS Code plugin, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 CLI \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 IDE. \u041e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u043b \u00ab\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0439\u00bb \u043a\u043e\u0434 \u0432 VS Code. PoC-\u0440\u043e\u043b\u0438\u043a, \u043f\u0440\u0438\u043c\u0435\u0440\u044b monkey patch, payload\u2019\u043e\u0432 \u0438 \u043a\u043e\u0434 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u044f ignore \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Snyk, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0444\u0435\u043a\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u0430\u0442\u0447 \ud83d\ude0a", "creation_timestamp": "2026-08-15T00:00:46.637340Z"}, {"uuid": "2db83d57-38f0-4d1a-946d-0da7309e0e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:15:06.458410Z"}, {"uuid": "e5221fdf-bd63-46aa-8454-568119a30b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:00:03.216038Z"}, {"uuid": "3e24592d-5492-4843-9b43-d8f5ae77b6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:15:06.169750Z"}, {"uuid": "c8bea506-fdc7-40ce-92ea-8403f3343a2b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97de8a32-271d-44a6-8f81-081bfbef74f9", "content": "", "creation_timestamp": "2026-06-30T09:22:38.118222Z"}, {"uuid": "42150ce8-6c6c-4d94-94cf-b5e1e36aa348", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-4063", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43b9125e-0e40-43a9-b97b-e2ab424b9749", "content": "", "creation_timestamp": "2026-06-30T09:22:54.352437Z"}, {"uuid": "efd98353-895e-452e-b3a7-fc4f176fb778", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc2bf820-a58d-4a5b-9b59-c01119b09188", "content": "", "creation_timestamp": "2026-06-30T09:23:33.194320Z"}, {"uuid": "e065ab99-4c65-4001-bcb7-cdb8c368267a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40022", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3da5c58b-827e-4a21-97a9-5b0a405736b6", "content": "", "creation_timestamp": "2026-06-30T09:23:15.342226Z"}, {"uuid": "500b0368-d51b-4380-bb41-69c05805b32f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40881", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0cb49db6-11d8-4694-884b-c3fa8ed7bb4b", "content": "", "creation_timestamp": "2026-06-30T09:23:20.439695Z"}, {"uuid": "2a2cd5a0-3f47-456d-b7bf-7faf2250d619", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-4050", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a645c8e9-d321-40f7-8167-b8813d4f13a6", "content": "", "creation_timestamp": "2026-06-30T09:23:24.431510Z"}, {"uuid": "4d01f8ad-e3e6-4e19-bc74-971caa7445d9", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/594830ba-10dd-45e7-a4e6-16aa8370f8ad", "content": "", "creation_timestamp": "2026-06-30T09:23:49.895209Z"}, {"uuid": "f3a1ae5a-e9a2-43f2-8cd4-5b712d642798", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40734", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b30b57ba-4519-4c50-bb94-847e39403dec", "content": "", "creation_timestamp": "2026-06-30T09:59:50.335391Z"}, {"uuid": "382d189a-bde8-4ce8-834c-7b3f52f593ac", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-40619", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63005d29-cf03-4141-9c5e-04ca5b78b636", "content": "", "creation_timestamp": "2026-06-30T10:01:20.477816Z"}, {"uuid": "f1cf47ec-5086-4db7-8c6e-4d8147c7d785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:00:02.605630Z"}, {"uuid": "2466a13d-3833-47f4-b57c-a8951ecf6258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:07.460644Z"}, {"uuid": "1f9682c9-3a42-41f2-afcf-830456c6458f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:15:08.516563Z"}, {"uuid": "918f92f2-225f-43da-a6e2-be08bdff149a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-12)", "content": "", "creation_timestamp": "2026-08-13T10:00:04.939649Z"}, {"uuid": "fd83aa7d-6d86-4fd6-8939-a305ac408827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "content": "", "creation_timestamp": "2026-08-13T10:15:08.868848Z"}, {"uuid": "b7ee0fb6-34b3-44bf-9a9e-d928000bc786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:05.086799Z"}, {"uuid": "12ec14fe-60ed-473c-a703-17a7f5560311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40320", "type": "seen", "source": "https://gist.github.com/EbonJaeger/dbd95fac767f33b74282ee64940b0537", "content": "545 updates:\n- **VTK** was updated to **9.6.2-52** ([@Jaredy899](https://github.com/getsolus/packages/commit/3eeed71a21b6404fbc9cc67f5738da02ec14f05b)).\n- **act** was updated to **0.2.89-1** ([@Tbusk](https://github.com/getsolus/packages/commit/49053300be294b1388260be1cfc8637561b53d2a)).\n- **aegisub** was updated to **3.4.2-47** ([@Jaredy899](https://github.com/getsolus/packages/commit/b81985b4c8506fb6303ea01996bb6525ae742375)).\n- **akonadi** was updated to **26.04.3-130** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2b1d033a683c8607d143975b0342af00aace8142)).\n- **akonadi-mime** was updated to **26.04.3-108** ([@HarveyDevel](https://github.com/getsolus/packages/commit/55371d3e45ee42be782cc48c71ee328df77abed0)).\n- **allegro** was updated to **5.2.11.3-16** ([@androidnisse](https://github.com/getsolus/packages/commit/a71933b3ff396d429eb144cb8543cea4debe489e)).\n- **appstream-catalog** was updated to **20260821-75** ([@joebonrichie](https://github.com/getsolus/packages/commit/dfbc21b5e1c2981536b232cc206e5e1f701fc43a)).\n- **argon2** was updated to **20190702-8** ([@sebo505](https://github.com/getsolus/packages/commit/c0089ab47b38aaf88dd89fb8570f3098ced91b01)).\n- **astroid** was updated to **0.17-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/a14ded0d01b17ff0f57928f397a14fd72a3669f1)).\n- **attract** was updated to **2.7.0-24** ([@Jaredy899](https://github.com/getsolus/packages/commit/16a692c87e8e37379f6c38f1db343b022eabcf4d)).\n- **aubio** was updated to **0.4.9-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/08d8db615b5feb1bdc0f7debc65bc5fb8c9c1051)).\n- **audacious-plugins** was updated to **4.6.1-63** ([@Jaredy899](https://github.com/getsolus/packages/commit/1f569dcfcedcb2c23a8dd13c605d22be6eca956d), [@androidnisse](https://github.com/getsolus/packages/commit/8727bcf0029d9a0e2129255f5a6fcea19e956a39)).\n- **audacity** was updated to **3.7.8-52** ([@androidnisse](https://github.com/getsolus/packages/commit/5e607d1a04d90c3db7d3c7119f9cd0b589cb6a31)).\n- **audiofile** was updated to **0.3.6-5** ([@androidnisse](https://github.com/getsolus/packages/commit/9620a2dc0a65c2898706b3740a97f8837f390e49)).\n- **azahar** was updated to **2126.0-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/f5e126eddb55977f200cbcee08988fbdb48d6b41), [@HarveyDevel](https://github.com/getsolus/packages/commit/e93fcb77030374456424a8e66a324de7103b773b), [@androidnisse](https://github.com/getsolus/packages/commit/6790022c1016288ffdab6a65bdddb2a7511b5fe5)).\n- **baloo-widgets** was updated to **26.04.3-105** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3cf2d36a0233df8b62d2fb34e0f149560e7aef0a)).\n- **bbswitch** was updated to **0.8-395** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a549a0d7889faa65daac0ca91bd09da4c18174d8), [@HarveyDevel](https://github.com/getsolus/packages/commit/6cb57e5c6a47db468e97cfb189aed45f042e3c3a)).\n- **bibletime** was updated to **3.2.0-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3ce886ff52b670db0d03ff05bb334dc8d702939d)).\n- **blender** was updated to **5.0.1-106** ([@Jaredy899](https://github.com/getsolus/packages/commit/2622360b663b90e0f7a92ced3b1841d43762a021)).\n- **bluedevil** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/922c958144e275938b61a44e47fb4914453cf056)).\n- **bluejay** was updated to **1.0.3-9** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dca098a25d67a11fa78d0ccc1a3fbf798a96ecc3)).\n- **botan3** was updated to **3.13.0-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/cc9aee5e154c116bf7fecc091043708936999b65)).\n- **bottom** was updated to **0.14.8-40** ([@EbonJaeger](https://github.com/getsolus/packages/commit/4523af9dceb82c3e8c7e169ebcca819fa3b8765a)).\n- **brave** was updated to **1.93.137-290** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ffc6eba901dc251f6b8ada222e5ef0b517364976)).\n- **breeze** was updated to **6.7.4-167** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8dbb22e2b513adf1049a943f84b7291307f378ee)).\n- **breeze-icons** was updated to **6.29.0-115** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bcd36cdead8e21404596526599988b383ed14ed7), [@HarveyDevel](https://github.com/getsolus/packages/commit/eee073cb9bfbcc1b14289715ad3dfc6dce83b518)).\n- **broadcom-sta** was updated to **6.30.223.271-467** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb28490a762224a3caee4ec221011093188ca596), [@HarveyDevel](https://github.com/getsolus/packages/commit/1473396a1dfb02889d3ca7adc512b51b97ea26ec)).\n- **buildkit** was updated to **0.32.2-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/1706d6acc7ed7fdc61c36734b711af4e2ea7e027)).\n- **ca-certs** was updated to **20250807-50** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5800a4846431f9b5f1df23b77c445f16123b316d), [@EbonJaeger](https://github.com/getsolus/packages/commit/17436b79454e1585a022747efcfefd66bc10314a)).\n- **calibre** was updated to **9.13.0-239** ([@Jaredy899](https://github.com/getsolus/packages/commit/b9db0c62fb74f180156f975cd4b29e195d86cd52), [@HarveyDevel](https://github.com/getsolus/packages/commit/f3892eb2bf0b9d63f239ac63b85ecdb2098602eb)).\n- **cemu** was updated to **2.6-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/759dac425f6e100bef7d300de2ea7494431a400c)).\n- **cherrytree** was updated to **1.7.1-53** ([@sebo505](https://github.com/getsolus/packages/commit/f6ce60f909ca31f2912f47770639a9d5290f120f)).\n- **chiaki-ng** was updated to **1.10.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/d244e9934691950d489e56a2bfae07d470a71d75), [@HarveyDevel](https://github.com/getsolus/packages/commit/7a6bdd4e5535a10d98b63b192e6b6726cbe3b161)).\n- **chromaprint** was updated to **1.6.0-15** ([@Jaredy899](https://github.com/getsolus/packages/commit/aae5e75d6ea62bcd2c97952745452c2614c336f5)).\n- **cinelerra-gg** was updated to **2026.07-54** ([@Jaredy899](https://github.com/getsolus/packages/commit/5c721b92614c17fec9fe7bbf23c7711664439b09), [@androidnisse](https://github.com/getsolus/packages/commit/527707e8d068073f79e350765d0447a9fa98adf7)).\n- **cloc** was updated to **2.10-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/8238920714396f09994850457aa6bea732aa3d27)).\n- **cmus** was updated to **2.12.0-26** ([@androidnisse](https://github.com/getsolus/packages/commit/8b0b873377d135f12a79acdffc27d428ba9c25c6)).\n- **collada-dom** was updated to **2.5.0-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/32552ee72495d83ce8fc7ee55d27f9cba2898818)).\n- **colord-kde** was updated to **26.04.3-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ef5ae742a296af7f45931c73b7ab17e6c0c72123)).\n- **containerd** was updated to **2.3.4-76** ([@Jaredy899](https://github.com/getsolus/packages/commit/dffaf8c9745342049a2d2b0c75461bb4330f80ac)).\n- **copyq** was updated to **16.0.0-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4edd7aeb52e6e314bb98be86354f88c55a0a81fd)).\n- **corectrl** was updated to **1.5.2-48** ([@Jaredy899](https://github.com/getsolus/packages/commit/9f61c26a2f7050565ce67e317354cc845b1cd730)).\n- **croc** was updated to **11.2.4-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/6fb77d2a4bb46917d88d5c306ac1384eeb82987e)).\n- **crun** was updated to **1.29.1-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/32830e90f8dbafaad0669d25d4f2ac413deb308c)).\n- **cryfs** was updated to **1.0.3-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/7a004c1074cf7ce789023082464a01fd3b4263ea)).\n- **deadbeef** was updated to **1.10.3-59** ([@Jaredy899](https://github.com/getsolus/packages/commit/e0e89145125c394134b9e556341954f2cde775ba), [@androidnisse](https://github.com/getsolus/packages/commit/e722ccd41242dbbf977d37e0492f04974ed9e0f6)).\n- **diffoscope** was updated to **328-22** ([@davidjharder](https://github.com/getsolus/packages/commit/0773fc221feb4cfd0f1da86b68196054d2bfd72c)).\n- **digikam** was updated to **9.1.0-70** ([@Jaredy899](https://github.com/getsolus/packages/commit/6a55727b3ec64c037c278ecdee17700687b47a8d), [@HarveyDevel](https://github.com/getsolus/packages/commit/bcfd1b844be1679a56a44705770247043542ff08)).\n- **discord** was updated to **1.0.154-175** ([@HarveyDevel](https://github.com/getsolus/packages/commit/62c24eac339c569dfd1bbd32df3abab701e71636)).\n- **docker-compose** was updated to **5.5.0-67** ([@Jaredy899](https://github.com/getsolus/packages/commit/a2d76f9dd8de2953d305f45c7fcd6f5762e97e4b)).\n- **doctl** was updated to **1.167.0-42** ([@davidjharder](https://github.com/getsolus/packages/commit/7de19b4f036ce551125c12af87fba328b70dd773)).\n- **dolphin** was updated to **26.04.3-120** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86c8f35974d7bddcb9122f0a93c090567b44f6ea)).\n- **dolphin-emu** was updated to **2512-92** ([@Jaredy899](https://github.com/getsolus/packages/commit/19d9a3bbd74d91f7cd8a6eb296f2bf52f7dcc716), [@HarveyDevel](https://github.com/getsolus/packages/commit/d7d36f946a9d8d0dfae51fc61daa3ddf8bb566ae)).\n- **dragon** was updated to **26.04.3-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/6263ce67e1052d0f0297867d4d2a94a8e1e52975), [@HarveyDevel](https://github.com/getsolus/packages/commit/c1dd5f4d21607f184eb284d05c0f727936b4cd6f)).\n- **droidcam** was updated to **2.1.4-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/881dc73602bc358ca389564e41765390cc699619)).\n- **dsp** was updated to **2.0-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/f31c43d9ff6f99d796056e63615da0608ed08353)).\n- **dua-cli** was updated to **2.42.1-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/d5fa10fd904166f95bef8e16a7a6a17c389e573a)).\n- **dust** was updated to **1.2.5-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/21ba131439b93995f115dc6c09ab05076df9c096)).\n- **easytag** was updated to **2.4.3-25** ([@androidnisse](https://github.com/getsolus/packages/commit/8d1518002289f7ebf36df5b562afe2760c63efee)).\n- **eden** was updated to **0.2.1-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/b303b9ab8cb2fe55bf3318001ce5089449cdf4f4), [@Jaredy899](https://github.com/getsolus/packages/commit/2b0153187a22fca41778b7f5f75f5963be63cc07), [@HarveyDevel](https://github.com/getsolus/packages/commit/ee7bf37a19e1e11c3cbf7025e15cada31fc940fa)).\n- **elisa** was updated to **26.04.3-79** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6747e5ea68b65ef6461c9153d69275bec9bb9c27)).\n- **endless-sky** was updated to **0.10.16-26** ([@androidnisse](https://github.com/getsolus/packages/commit/dbafac3477592d47c2f803e9682a74f6f93db985)).\n- **extra-cmake-modules** was updated to **6.29.0-111** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f805c3efb57242511eb12bd6db493ccc966fc408)).\n- **falkon** was updated to **26.04.3-78** ([@HarveyDevel](https://github.com/getsolus/packages/commit/94086cfe9a593122c21b646517bf355798e09308)).\n- **fceux** was updated to **2.6.6-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/778741d81e9dfb0637e22fafca1dbd8fe4bb2ef4), [@davidjharder](https://github.com/getsolus/packages/commit/7c495a6261375dbdc29508831c0b0feffab325e8)).\n- **fcitx5-qt** was updated to **5.1.11-6** ([@HarveyDevel](https://github.com/getsolus/packages/commit/27af8c8c562c9a435d661795c414f095e7b957e9)).\n- **ffmpeg** was updated to **9.0.1-182** ([@Jaredy899](https://github.com/getsolus/packages/commit/e4cedd4f7c71fb5253042f0b0c46e6db527b4e53), [@davidjharder](https://github.com/getsolus/packages/commit/6ceb4d1c3dfe2cece64dfdd631f17d9cde3f5222)).\n- **ffmpeg-4.4** was updated to **4.4.6-14** ([@davidjharder](https://github.com/getsolus/packages/commit/869be90e01909f329905866fc71add5a88185403)).\n- **ffmpegthumbnailer** was updated to **2.3.0-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/0d0cb0681637140b8ed8b0288db3a626c9c8c197)).\n- **ffmpegthumbs** was updated to **26.04.3-105** ([@Jaredy899](https://github.com/getsolus/packages/commit/6e866b491308819b486beb55f2a2b10d87361843)).\n- **ffms2** was updated to **5.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/8b82747e6a6a9e491f6d1741c8f44046ba7e81d3)).\n- **firefox** was updated to **154.0-421** ([@joebonrichie](https://github.com/getsolus/packages/commit/aef369c5a24db6a8ef0c7c4da6506949a1d65c65), [@HarveyDevel](https://github.com/getsolus/packages/commit/d7359b3b71e863a7bfd250034a4869d157a8e5ae)).\n- **firefox-langpacks** was updated to **154.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c737757846774d86357808f4487682022645105a)).\n- **flacon** was updated to **12.0.0-16** ([@androidnisse](https://github.com/getsolus/packages/commit/9e662bcd896bfeb5c9f13c3ae039b0ad1a3132f0)).\n- **fooyin** was updated to **0.12.5-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/0049263844369986838b049762d20c61daeabe0c), [@androidnisse](https://github.com/getsolus/packages/commit/8c0e4775efbab8437aba2f2df1f5d294cc72848b)).\n- **freecad** was updated to **1.1.3-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/f230f877a9ab58d4889466782b157406f2146545)).\n- **freeorion** was updated to **0.5.1.2-42** ([@Jaredy899](https://github.com/getsolus/packages/commit/8719e737db356dc7cb9e867113924fc7bfc06928)).\n- **freerdp** was updated to **3.30.0-56** ([@Jaredy899](https://github.com/getsolus/packages/commit/78999329505cb38f69c581e417a9a470713f7fd5)).\n- **gammaray** was updated to **3.4.0-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9b1fdafbc46d69b6f6cf4995bd49ff6f8f3b536f)).\n- **gdu** was updated to **5.37.0-7** ([@DinimixisDEMZ](https://github.com/getsolus/packages/commit/21ee9ea2ad901be8cc58dbed7f2bd861c9345ed3)).\n- **geeqie** was updated to **3.1-30** ([@davidjharder](https://github.com/getsolus/packages/commit/4f5aafb30f79a473b5ba7f42eac9a0f258009d65)).\n- **gegl** was updated to **0.4.70-68** ([@Jaredy899](https://github.com/getsolus/packages/commit/88bb0d7f78a51040f3337abdd7c66911ba7728b4)).\n- **ghostwriter** was updated to **26.04.3-65** ([@HarveyDevel](https://github.com/getsolus/packages/commit/00957a3da9a2f6765a9d8d446681286f5dc6c263)).\n- **gifski** was updated to **1.34.0-19** ([@Jaredy899](https://github.com/getsolus/packages/commit/9dbf79dec201fbbf5d17b9bf7ce91a120d7fb60f)).\n- **glibc** was updated to **2.43-145** ([@EbonJaeger](https://github.com/getsolus/packages/commit/85562dbe1ee32ebc04ac795a0c1498742788dc06)).\n- **gnucash** was updated to **5.16-68** ([@Jaredy899](https://github.com/getsolus/packages/commit/acead308aad0aaa9f6a08d53dfed31d08ffd740d)).\n- **gnuradio** was updated to **3.10.12.0-23** ([@Jaredy899](https://github.com/getsolus/packages/commit/54cdd0c6d7d60439a1def8be6dbc03427c3f4e56)).\n- **golang** was updated to **1.27.0-146** ([@silkeh](https://github.com/getsolus/packages/commit/5ddec4cbc7fa28d1f16a0966f04ed791dfc6c737)).\n- **gource** was updated to **0.56-25** ([@Jaredy899](https://github.com/getsolus/packages/commit/cb74849a0750e132958a0c241842a813003edfdc)).\n- **gpu-screen-recorder** was updated to **5.13.3-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/b2b9b61b5bd10722208b8f276e57c20363cf5fd6)).\n- **graph-tool** was updated to **2.98-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/355f08ecaa87aa125e936ed44cc5a65ef7e1e56e)).\n- **gstreamer** was updated to **1.28.6-145** ([@Jaredy899](https://github.com/getsolus/packages/commit/d7bf8dbb1594e3027974bf4ed065651e43435a7b), [@androidnisse](https://github.com/getsolus/packages/commit/2312201860a9bdf0c4c32e3cb4c783d8c8475039), [@davidjharder](https://github.com/getsolus/packages/commit/11c9cbd37de581962ff128b7322e64dfae48915d), [@HarveyDevel](https://github.com/getsolus/packages/commit/198c2b43c693bf14dcf2334a6e229bb179cbd5cc)).\n- **guitarix** was updated to **0.47.0-26** ([@Jaredy899](https://github.com/getsolus/packages/commit/f18deeea045a422aa3bf6f3d3744cae5ad314719)).\n- **gum** was updated to **2.0.0-6** ([@Jaredy899](https://github.com/getsolus/packages/commit/401195c34bf8ac0da294c8532205f938f9c71357)).\n- **guvcview** was updated to **2.2.2-27** ([@Jaredy899](https://github.com/getsolus/packages/commit/f0346e70cd8f02bc4bdfb70f06ab272b5802b393)).\n- **gwenview** was updated to **26.04.3-122** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9b27a795b4dd1295bbcaaa5ed632eb4df7161312)).\n- **handbrake** was updated to **1.11.2-52** ([@davidjharder](https://github.com/getsolus/packages/commit/ef7e67de841d5d56532124e526b7cb519d325cb2)).\n- **haruna** was updated to **1.8.1-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/e24b4b78253431ce3445bfab5dc2764b23f9da22), [@HarveyDevel](https://github.com/getsolus/packages/commit/f6b9bac3f8895881c510562dc7e1ddbefeee813b)).\n- **heaptrack** was updated to **1.5.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/6c16d225b259c513d42c3a6676c56f4a40ea580c)).\n- **hedgewars** was updated to **1.0.3-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/80de031a657d5c0b3907df28cdd917eb4b6f31b6)).\n- **htop** was updated to **3.5.3-30** ([@HarveyDevel](https://github.com/getsolus/packages/commit/11fc99cf579aa5437703a3bf26f0afcee86fd359)).\n- **hyprland-qt-support** was updated to **0.1.0-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7bdb2b7ce50f64405241eb503ca26ad53ebe6d28)).\n- **hyprpolkitagent** was updated to **0.1.3-8** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ceb1cfad9b9fe925011a58b213a9fbfc1dc45eb9)).\n- **inkscape** was updated to **1.4.4-81** ([@Jaredy899](https://github.com/getsolus/packages/commit/00abc8557d0f8b8bc1be2ed043efc728b43496be)).\n- **innoextract** was updated to **1.9-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/7ae653c0c115fc66bc37266244b43314e2f1667b)).\n- **isoimagewriter** was updated to **26.04.3-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c07ef9f6296b9353e35255e02fc45305f596e0dd)).\n- **jellyfin-desktop** was updated to **2.0.0-2** ([@Jaredy899](https://github.com/getsolus/packages/commit/63c929a6f95e32299dba3d575c5bdcaaf99aea49), [@HarveyDevel](https://github.com/getsolus/packages/commit/e5b994a218bb723d6fe568acf39bf91d75afad16)).\n- **k3b** was updated to **26.04.3-111** ([@Jaredy899](https://github.com/getsolus/packages/commit/3b0f52d9034785981efb02951550c72f617e0168), [@androidnisse](https://github.com/getsolus/packages/commit/99e6c57c8fae1ef82c20cff80269d85cfd732fad)).\n- **kaccounts-integration** was updated to **26.04.3-98** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10e109ece90609925c85dd3fbcdfd36e95a9db70)).\n- **kasts** was updated to **26.04.3-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7ef58335f1284cc667c0c377154bdd1d565c4cab)).\n- **kate** was updated to **26.04.3-117** ([@HarveyDevel](https://github.com/getsolus/packages/commit/05fe98f9483dfe26925dc184a0763d03053bd8c4)).\n- **kbibtex** was updated to **0.10.0-25** ([@Jaredy899](https://github.com/getsolus/packages/commit/1a9268b9959126e27fcca85e7f5f9a50f9e9b6da)).\n- **kcachegrind** was updated to **26.04.3-57** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2df92e47d2c099477bb13845eee4f12a65909983)).\n- **kclock** was updated to **26.04.3-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d4f2b9cd9601d89826c46f0fe8aed852bd41da4)).\n- **kddockwidgets** was updated to **2.4.0-5** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd06de6c4c3a6efaea0c030d7d6147816ef6362f)).\n- **kde-cli-tools** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/925733378a6b384f3b7b6a6f840cd187043a3208)).\n- **kdeconnect** was updated to **26.04.3-104** ([@HarveyDevel](https://github.com/getsolus/packages/commit/366fa217d68fd0fbab51f5f940597063aacc86ff)).\n- **kdenetwork-filesharing** was updated to **26.04.3-95** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec7d81908c0c733f592e3f5abfbc21badcccc0b7)).\n- **kdenlive** was updated to **26.04.3-135** ([@Jaredy899](https://github.com/getsolus/packages/commit/a510eea2a43a02b0684f484f296087014d085fed), [@HarveyDevel](https://github.com/getsolus/packages/commit/8b38ae0095658a256535166343d572aa9bdbe4f3)).\n- **kdeplasma-addons** was updated to **6.7.4-154** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3176d46a8f0c945a1d313754fff34624bca58101)).\n- **kdevelop** was updated to **26.04.3-95** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e6fe63d4e50a5fe82166afae2877dd8819507c15)).\n- **keepassxc** was updated to **2.7.12-56** ([@Jaredy899](https://github.com/getsolus/packages/commit/bec081f31c508afd0b63cf3c6fde48368b011159)).\n- **keysmith** was updated to **26.04.3-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cbb0e6b671c1fb49d16249547cfd7ce6748acb74)).\n- **kf6-attica** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/35ba45262dce93f577b61364056ab090ddc84ab1)).\n- **kf6-baloo** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8799b12bd27431f5be9049477a806ba4e9e9bd3e), [@HarveyDevel](https://github.com/getsolus/packages/commit/9ae66b880fb322980da29827ea22b75bdc9ad6b6)).\n- **kf6-bluez-qt** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b20d7bdfa0d7a6ba8e068688a444eaaf55150d79), [@HarveyDevel](https://github.com/getsolus/packages/commit/a85c15eec0f9f2eb01ded387501c53350dcd89d0)).\n- **kf6-frameworkintegration** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/13fd08c6089bfb940d00940ed57cb775f3a5a8a3)).\n- **kf6-karchive** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d02d3823cc5029894677a91bcfb36ba5f990ecf6)).\n- **kf6-kauth** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a2e265928aa3b881080dafa7de1d3a2518753b97)).\n- **kf6-kbookmarks** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7188601b12bd9071f675648aca0575e59c08d6bc)).\n- **kf6-kcalendarcore** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4c781a1c64ce92d62cb8cf1187ff6ea76382fbeb), [@HarveyDevel](https://github.com/getsolus/packages/commit/d61cb4f2d92f75e38927528467a63a9545d4a534)).\n- **kf6-kcmutils** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/261f96eeebdc080ff4be879459cee3a806d388d4), [@HarveyDevel](https://github.com/getsolus/packages/commit/1c01e497a57206876dd8a06535560d99f67bcee1)).\n- **kf6-kcodecs** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2e317a56026200a0937025a12aab989d39a7fa32)).\n- **kf6-kcolorscheme** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/25752544662207b1621b3df5fd50dbebb73ca140), [@HarveyDevel](https://github.com/getsolus/packages/commit/2722b6e0f29210752eeef0f9701bb4332debee7c)).\n- **kf6-kcompletion** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/45a3e3d0972d7e11b67d323f57a829f054d983fc)).\n- **kf6-kconfig** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/863513fd8f7891eb04339095f2a3b7ef3e41e462), [@HarveyDevel](https://github.com/getsolus/packages/commit/3c194b58c54be24e419590b20e4539180d757ff3)).\n- **kf6-kconfigwidgets** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10bf47384f44d42f3609cf3d280d39418111ef71), [@HarveyDevel](https://github.com/getsolus/packages/commit/99139c5e1d5b1c690d0456ecb2a9f3013d92a9ea)).\n- **kf6-kcontacts** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1feebd4fcd71afa667443774ca322c93b5c6dce9), [@HarveyDevel](https://github.com/getsolus/packages/commit/1261ec1f31ca0a111ac3f298a45da45c7c596356)).\n- **kf6-kcoreaddons** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/31ec71deb2242fced46526eeeeb6d5a75692c8ac), [@HarveyDevel](https://github.com/getsolus/packages/commit/0fd51601d6113aa70efde135c8acc31e97f345ba)).\n- **kf6-kcrash** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/90d2a80fb8d59e64bd731b3a5a90a557538ea6d4)).\n- **kf6-kdav** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/800d97b52c7999ab9201d2d7cd2255b98e47e2f9)).\n- **kf6-kdbusaddons** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6a93dabd48e6276087b1fd2648dabfb25f373b65), [@HarveyDevel](https://github.com/getsolus/packages/commit/0f3b77f890a1b980f4d5f33af22ea1c491e09b66)).\n- **kf6-kdeclarative** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eda51f124c567993c40b992df605d6d66cc1480c), [@HarveyDevel](https://github.com/getsolus/packages/commit/1e50c1284ea5b6c868e797b173ad06286ac64080)).\n- **kf6-kded** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9cc642389d09adf47dc387f2034fcbd1de5d05ce)).\n- **kf6-kdesu** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/300f1b4dbefb502310eb41ee3bcd8b92b54f4b1b)).\n- **kf6-kdnssd** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a84166e1cff0ae56123d4cec2a2ce22f165beaa5)).\n- **kf6-kdoctools** was updated to **6.29.0-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bc98a351194db3338977f3f5847ba9347ee25287)).\n- **kf6-kfilemetadata** was updated to **6.29.0-42** ([@Jaredy899](https://github.com/getsolus/packages/commit/f57a327c355e42e6c7e2b9d1910e1c14ecb0052a), [@HarveyDevel](https://github.com/getsolus/packages/commit/a1d3a975904e5a1099972177ec9d41aff9874cb4)).\n- **kf6-kglobalaccel** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/288cb99bce64dc25157c0b5d1dfb9598e5bad462), [@HarveyDevel](https://github.com/getsolus/packages/commit/ae0b1df4f161bf63eaf5c9ff2baa4e8c41f4e74b)).\n- **kf6-kguiaddons** was updated to **6.29.0-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/03660ec67b12947aafdfaba9e3e00a92ec03e42a), [@HarveyDevel](https://github.com/getsolus/packages/commit/b71c31137bc8ec83a82dc0fcf5116635f4666933)).\n- **kf6-kholidays** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d6f586769dbd0ae56c62fa0e998ef7d93ffce1eb), [@HarveyDevel](https://github.com/getsolus/packages/commit/2f8d26093f8d53d054af047ea4f16acb00e4d779)).\n- **kf6-ki18n** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/011f552e0ea9c596d8882b8519f82eb194e855ca), [@HarveyDevel](https://github.com/getsolus/packages/commit/258538e23ce7a145eac8f1fe25b5aa11b02319fe)).\n- **kf6-kiconthemes** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ea9a9fa459867ab8b8fa09b50d4bfd4bdddbf88f), [@HarveyDevel](https://github.com/getsolus/packages/commit/2ad3a7e606a1c2085a043e415cd6dbcb8354d689)).\n- **kf6-kidletime** was updated to **6.29.0-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b64e3c92eb410724a30a6f2a309488cc558d7f0f), [@HarveyDevel](https://github.com/getsolus/packages/commit/d938e984df3784f9c55d15474760b55b36087c72)).\n- **kf6-kimageformats** was updated to **6.29.0-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/13fcbaae6ca009ee3c51377329a74f5add2d1f93)).\n- **kf6-kio** was updated to **6.29.0-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/913e1dceaf85bd54c4be144a29184daebf5091f2), [@HarveyDevel](https://github.com/getsolus/packages/commit/f5734064dabdf04493d7036dbad0ee856a12a9ce)).\n- **kf6-kirigami** was updated to **6.29.0-45** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7bc3e89d922f8f806774424689a07f489f2beab8), [@HarveyDevel](https://github.com/getsolus/packages/commit/9fc3fc1098c0b07b510a6b78c5d925ae56fcac70)).\n- **kf6-kitemmodels** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/64440de1b13a251e5d1dfe7444c2de7cda61fcea), [@HarveyDevel](https://github.com/getsolus/packages/commit/ca083af6c510c629a652a1b616828440e52c99e7)).\n- **kf6-kitemviews** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c497ba528d00bd49d0011da0491d847c1aaf4c77)).\n- **kf6-kjobwidgets** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e168fda606018c8d7fc7824f02b556c1db16761c), [@HarveyDevel](https://github.com/getsolus/packages/commit/c64d6a02ca175613c03811f5138d8a8bd2c23d3e)).\n- **kf6-knewstuff** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c7af7cb3daea451d2f430207d3b56483951917f6), [@HarveyDevel](https://github.com/getsolus/packages/commit/8967f0189aee368454307e796ae9f028917f1fc2)).\n- **kf6-knotifications** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0ac4c3c1271e1e40bdc24cd6570a46e580266ff5), [@HarveyDevel](https://github.com/getsolus/packages/commit/f50fe6b621415e097fddf94a827ef15e2fa22d0a)).\n- **kf6-knotifyconfig** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b9ef574edfdd929c55301438de8ad2e6a843ed0e)).\n- **kf6-kpackage** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/08100eb59b669d36e234d01bb2058c03e293fa52)).\n- **kf6-kparts** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/142f6c5d51ba2997814f9204962d36b6ef262b34)).\n- **kf6-kpeople** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ca212540f4841e16da89dc9e3413643d95c23128), [@HarveyDevel](https://github.com/getsolus/packages/commit/831f8ff5f9903054fcd8eff899683260b0b5ee75)).\n- **kf6-kplotting** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/808b308b32f6b22a75a603d2e2e13cabddf130dc)).\n- **kf6-kpty** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c61600866ebe7c16583aa0f4e84c753c2b849346)).\n- **kf6-kquickcharts** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1769ab7d91343cb996b1060a99634acc4825f63a), [@HarveyDevel](https://github.com/getsolus/packages/commit/09bdd1f41e3716c8c82e838589423b3feb8a9177)).\n- **kf6-krunner** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5dc492f4caaf16b2972af808225a438ee8d67bf2)).\n- **kf6-kservice** was updated to **6.29.0-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/51aa2d0ebb036ebc7ab5f15cf6611c59f53e9b8f)).\n- **kf6-kstatusnotifieritem** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7dee8e19b9def70fe6f10b5cd40dffe4fa942eb6), [@HarveyDevel](https://github.com/getsolus/packages/commit/6838d90abcb60ab634c6fd550cbfe15b628d4726)).\n- **kf6-ksvg** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d636da722a7bb53e93df509c76a4202ddc106173), [@HarveyDevel](https://github.com/getsolus/packages/commit/9362c239bbf4575bae52cafd49340cafea6655ec)).\n- **kf6-ktexteditor** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6c7f2958467c30664ae936671dcfd59f886263e7)).\n- **kf6-ktexttemplate** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8a60022a5ff6245a7cf94e764c76d404badd7d33)).\n- **kf6-ktextwidgets** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e47916f0cbb05e40bcda1f1147dd52d372188f85)).\n- **kf6-kunitconversion** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e799cfdf251809c61b50d30e2c8c1ff3e910b4d0)).\n- **kf6-kuserfeedback** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/79c7e27e8a18f9ca7739e6805d7af767f116e459), [@HarveyDevel](https://github.com/getsolus/packages/commit/3573196a6365690185a4e9b3905a764271ef9e63)).\n- **kf6-kwallet** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/80c512929bb86ecd8f5cc2b36c77e4e2049f79db)).\n- **kf6-kwidgetsaddons** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ddc29bf9068a9ee44c889957ef1a829e719a3deb)).\n- **kf6-kwindowsystem** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a7e70ebc66519d7abbe7778659b777a6ef8098cc), [@HarveyDevel](https://github.com/getsolus/packages/commit/12284e7dc28ca133358ebdaba0b0d3ef99ca5818)).\n- **kf6-kxmlgui** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/075142e63dec90f317d76795f10bdafd0f0622fa), [@HarveyDevel](https://github.com/getsolus/packages/commit/24b77e5dd0860ea2d465a9f669a4c00868b2dc97)).\n- **kf6-modemmanager-qt** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/039d1323f11dbe0ca3a22003de5559cb9a306b46)).\n- **kf6-networkmanager-qt** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cece04876a1126572aad8dbfa919992d04e2204b), [@HarveyDevel](https://github.com/getsolus/packages/commit/bf0d15d66c98eed27df53a19ee6ebf9c7a91f955)).\n- **kf6-prison** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0e6e7ba8e40382bd206d7b9219fdff5869c74042), [@HarveyDevel](https://github.com/getsolus/packages/commit/e3df5b7a61f3c4fc23b28a4c2d419c5c49bd82ff)).\n- **kf6-purpose** was updated to **6.29.0-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d962bf62c1cdcd20a307c9a1ac9e72067aecff0), [@HarveyDevel](https://github.com/getsolus/packages/commit/97d7ade00b27e80f605cef160687a31316ab09c9)).\n- **kf6-qqc2-desktop-style** was updated to **6.29.0-42** ([@HarveyDevel](https://github.com/getsolus/packages/commit/77d8cd545526e950c71a177ed03e95258ae24d8b), [@HarveyDevel](https://github.com/getsolus/packages/commit/16545c998aa70ba71e9619cfbe1edd355daf19f2)).\n- **kf6-solid** was updated to **6.29.0-39** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1e814bdb318014346fdd27c79d7bac8d6df81b38)).\n- **kf6-sonnet** was updated to **6.29.0-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/16cf53c435892814ec68c6cd046279d0591007c2), [@HarveyDevel](https://github.com/getsolus/packages/commit/be7419a4bfa13ab960a9b7ac64be6b67aa073bb5)).\n- **kf6-syndication** was updated to **6.29.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e96c285082133371eead5dcdc1d92d8d7f827388)).\n- **kf6-syntax-highlighting** was updated to **6.29.0-41** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5a32e2a2508ad4371120bdd3084315b118fb97b), [@HarveyDevel](https://github.com/getsolus/packages/commit/e632ac8c57fd70fc5a76c03951b87132b2412237)).\n- **kf6-threadweaver** was updated to **6.29.0-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a5317ea88b3a02f6295b56e6360fab2db51fd6c1)).\n- **kglobalacceld** was updated to **6.7.4-55** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7a7e0e4ba1c20de219e9a42b1b5b57d71a2c8a0a)).\n- **kgraphviewer** was updated to **26.04.3-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1ef3238db6957ca405e7801c7c012675f07d2eab)).\n- **kid3** was updated to **3.9.7-31** ([@androidnisse](https://github.com/getsolus/packages/commit/7b0ba323bdc703744f3bfdcef4c19a1eaa61117c)).\n- **kidentitymanagement** was updated to **26.04.3-106** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6c16d7d8ca6510821d548fd47ad8a55f02b4ddff)).\n- **kinfocenter** was updated to **6.7.4-152** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5d32108842721e85f369844ae0c7b024dedc0571)).\n- **kio-admin** was updated to **26.04.3-32** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5229bced5bdcc72b66f74cc53730835481c38340)).\n- **kio-extras** was updated to **26.04.3-160** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c647e891bf28a975ecee778b3e79582bd69cf3eb)).\n- **kio-gdrive** was updated to **26.04.3-82** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3971d3d8e3f4e2a944e15580a7db720a915891f4)).\n- **kirigami-addons** was updated to **1.13.1-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0a378e985e6155809ab514c0c055d29c941e79e5)).\n- **klayout** was updated to **0.30.8-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/314b358442ce779d0f8359794fda0223d4d1af11)).\n- **kmail-account-wizard** was updated to **26.04.3-109** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1ee892dd5d5127a3aa14f494724e630cda24a1ed)).\n- **kmymoney** was updated to **5.2.2-43** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dfe2b66b3b50bb3c73a53619b9440dd377a797c8)).\n- **knighttime** was updated to **6.7.4-18** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f6ffde51ee58df6a8c4fcb3a496a1ee9fdc536e7)).\n- **kompare** was updated to **26.04.3-91** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9cdec52636cf682dcbbf3cfbe0bfb98265ecaa99)).\n- **kompose** was updated to **1.38.0-1** ([@Tbusk](https://github.com/getsolus/packages/commit/764521845dee3bf0c955890e4f9691bad8d36716)).\n- **kontactinterface** was updated to **26.04.3-105** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb0a8a992ff87d0c457d3e195e5980bf643d615f)).\n- **konversation** was updated to **26.04.3-73** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e5dfda406118b097d4a8dc668a8b6e4111e8ae35)).\n- **kpipewire** was updated to **6.7.4-71** ([@Jaredy899](https://github.com/getsolus/packages/commit/5490670e81b97105bdf20dffc7e067a836dcaed9), [@HarveyDevel](https://github.com/getsolus/packages/commit/2e3bd61c97b3a0eabc5f03df91b9ac53426ec037)).\n- **kquickimageeditor** was updated to **0.6.2.1-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/36b75f8e971b4522a9b3d03add759f215e1daaf6)).\n- **kraft** was updated to **2.0.0-16** ([@clintre](https://github.com/getsolus/packages/commit/2245e418ff59f60b57b5dcc2f7f1a71f10602bbd)).\n- **krdc** was updated to **26.04.3-94** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a760375fef0817586b8108ecccbbb3fa0fab8837)).\n- **krdp** was updated to **6.7.4-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/085e9088e7103f5d6d173fde8cd1bc7a493206c2)).\n- **krfb** was updated to **26.04.3-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f4a40c7a720b69569002738568309dcf1b85f15b)).\n- **krita** was updated to **6.0.2-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bb591d5ffc60ae41cd54cfa35c2f5927558e3511)).\n- **kscreen** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6d4bde89c948f7a01cdf19f62f60e47051369d4a)).\n- **kscreenlocker** was updated to **6.7.4-151** ([@HarveyDevel](https://github.com/getsolus/packages/commit/758b51e1bc0493e7f5e89390ff08dfcfa3c2cad2)).\n- **ksshaskpass** was updated to **6.7.4-144** ([@HarveyDevel](https://github.com/getsolus/packages/commit/84750075294ef503ce0d7204e0e039b795c00244)).\n- **ktorrent** was updated to **26.04.3-35** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cc5f825d240e4396bb289040b490f1cee4d341f7)).\n- **kvantum** was updated to **1.1.8-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5b5f2932d3a378d1747796f2e0eda482c0ce954)).\n- **kwave** was updated to **26.04.3-76** ([@HarveyDevel](https://github.com/getsolus/packages/commit/080dbdebe9964035f59e679ab700eeb61949dc3e)).\n- **kwayland** was updated to **6.7.4-128** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b98909156491448a21a10484ba94fb890fc995a1)).\n- **kwin** was updated to **6.7.4-191** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0a9186ea2f33fdd4c0a95e03e57960173b7ac82f)).\n- **kwin-x11** was updated to **6.7.4-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/78abda7c9f2681bc759a60f8a97d6ffe19f61479)).\n- **layer-shell-qt** was updated to **6.7.4-85** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a9f872cb4b58383d3675cfc59b84886867e304f7)).\n- **ledger** was updated to **3.4.1-22** ([@Jaredy899](https://github.com/getsolus/packages/commit/75e43750347ba4dacc57cfe8389cdc50f305672b)).\n- **lenovo-legion-linux** was updated to **0.0.20-48** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dfec024fc8508bfa76db59e22f89467f399ccbf8), [@HarveyDevel](https://github.com/getsolus/packages/commit/38ed62da41068154017ad693f6384b4904d4150c)).\n- **libboost** was updated to **1.92.0-48** ([@Jaredy899](https://github.com/getsolus/packages/commit/578e5eb20298869f63467246b61c96f7bb1dc921)).\n- **libcmis** was updated to **0.6.3-13** ([@Jaredy899](https://github.com/getsolus/packages/commit/02daff76394009d932474296b652f6660af37bf4)).\n- **libconfuse** was updated to **3.4-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/bdb022bcb9c80dd88c7ddf11c85d0a7a5dd35762)). Includes security fixes for [CVE-2022-40320](https://nvd.nist.gov/vuln/detail/CVE-2022-40320).\n- **libflac** was updated to **1.5.0-19** ([@androidnisse](https://github.com/getsolus/packages/commit/1711b9e040cee775876f4cbf3e5d366fa355d853)).\n- **libfprint** was updated to **1.94.100-11** ([@uni-dos](https://github.com/getsolus/packages/commit/26e185de802a1ef678ce94ce3f15f826dade8736)).\n- **libgit2** was updated to **1.9.7-42** ([@EbonJaeger](https://github.com/getsolus/packages/commit/f7acc9a67e96e46cd930b5c22bd49c3e30c63970)). Includes security fixes for [CVE-2026-53586](https://nvd.nist.gov/vuln/detail/CVE-2026-53586), [CVE-2026-53584](https://nvd.nist.gov/vuln/detail/CVE-2026-53584), [CVE-2026-53585](https://nvd.nist.gov/vuln/detail/CVE-2026-53585), [CVE-2026-53583](https://nvd.nist.gov/vuln/detail/CVE-2026-53583), [CVE-2026-53587](https://nvd.nist.gov/vuln/detail/CVE-2026-53587), [CVE-2026-5917](https://nvd.nist.gov/vuln/detail/CVE-2026-5917).\n- **libgphoto2** was updated to **2.5.34-21** ([@androidnisse](https://github.com/getsolus/packages/commit/87cd8f8932f8f178c074f5e72f3c7a1ef0848de6)).\n- **libheif** was updated to **1.23.1-65** ([@Jaredy899](https://github.com/getsolus/packages/commit/ea7988b6788ef801260a3ae51ce35e4f11c8514e), [@davidjharder](https://github.com/getsolus/packages/commit/90a658db651bd88c781d14efe1e403d2589076d2)).\n- **libixion** was updated to **0.20.0-31** ([@Jaredy899](https://github.com/getsolus/packages/commit/8ef7207c10bbf08202116fe662806fb943ecc44e)).\n- **libkdegames** was updated to **26.04.3-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd477db8acac5fbb6b4bb3c19f427979b16f3118)).\n- **libkolabxml** was updated to **1.3.1-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/5160daeef87b8ae7a421bd009fb9d41b03f8a036)).\n- **libkscreen** was updated to **6.7.4-143** ([@HarveyDevel](https://github.com/getsolus/packages/commit/781e626202e7d1d35c9222a0a9f66b4c06b6db3f)).\n- **libksysguard** was updated to **6.7.4-145** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0e6cb822baa2b6cb1e35dfa02d5221cb423802ac)).\n- **libktorrent** was updated to **26.04.3-71** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2d48ce1e85117ea57e55fcbdf1fb9068798c7005)).\n- **liblangtag** was updated to **0.6.8-4** ([@androidnisse](https://github.com/getsolus/packages/commit/3d8ab3e66fbab4ea9e6ecede9848cf6c9bffc30c)).\n- **libldac** was updated to **2.0.2.6-3** ([@androidnisse](https://github.com/getsolus/packages/commit/a982e2f0fd553a467b0ecc3f1877a36161c08d3d)).\n- **libldm** was updated to **0.2.5-14** ([@androidnisse](https://github.com/getsolus/packages/commit/9e911d69aaa3c48234ac4fef6bf3476a2a46052e)).\n- **libmd** was updated to **1.1.0-4** ([@androidnisse](https://github.com/getsolus/packages/commit/ef45716cdc1aba3be3e3e253c2ff0ba83aa0336c)).\n- **libnspr** was updated to **4.40-28** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2bc8e735ef67aaf74a3b026327fb6266aa4c012b)).\n- **libnss** was updated to **3.127-87** ([@HarveyDevel](https://github.com/getsolus/packages/commit/774881aa5b9baec06fa2d329acf166d085e4c908), [@EbonJaeger](https://github.com/getsolus/packages/commit/d61e3ec8c60d0e79d575b40ac41caaffbf6a040c)).\n- **libnvidia-container** was updated to **1.20.0-13** ([@androidnisse](https://github.com/getsolus/packages/commit/b2b995427ae5ca57762c9563e45ccc582fa1bb74)).\n- **liboauth** was updated to **1.0.3-6** ([@androidnisse](https://github.com/getsolus/packages/commit/f0827b0a444efd92d6d3267fc1974d8f499691ef)).\n- **libopenmpt** was updated to **0.7.3-13** ([@androidnisse](https://github.com/getsolus/packages/commit/72e5613b41866a2ca99b18cd7963982183b26fcf)).\n- **libopenshot** was updated to **0.7.0-50** ([@Jaredy899](https://github.com/getsolus/packages/commit/4f82bfe1d8f307f1aacd2afa836c7bfce78ddf2d)).\n- **liborcus** was updated to **0.21.0-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/3634298b094e4d9a023f582de9ad5757c5979985)).\n- **libphonenumber** was updated to **9.0.36-17** ([@Jaredy899](https://github.com/getsolus/packages/commit/9a95f8eb03b374b84e9fecd95bff80a4808de41c)).\n- **libplasma** was updated to **6.7.4-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/be03de1116b228ddf617a299cbbbee055e41fddd)).\n- **libportal** was updated to **0.10.0-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2329e3002f3a4d64769c3bae391cf79828d3a978)).\n- **libqrtr-glib** was updated to **1.2.2-2** ([@androidnisse](https://github.com/getsolus/packages/commit/18fbce39a78fcc9a9e0e99aabb6bd82fbeee2bfc)).\n- **libquotient** was updated to **0.9.5-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/df9365f7c22763fde45331986e720fa616928092)).\n- **libreoffice** was updated to **26.2.5.2-214** ([@Jaredy899](https://github.com/getsolus/packages/commit/4dd4e324b094b34f8d67eec70b4e8fdd3553ea06)).\n- **libreoffice-voikko** was updated to **5.0-3** ([@androidnisse](https://github.com/getsolus/packages/commit/e1494d737605d04fe6c0a9178a25107db42a0131)).\n- **libshout** was updated to **2.4.6-8** ([@androidnisse](https://github.com/getsolus/packages/commit/1eac31be84234b8e9edc375e29c996f1fafda8a6)).\n- **libsndfile** was updated to **1.2.2-27** ([@androidnisse](https://github.com/getsolus/packages/commit/e44ec8f5465061eee9371286ed0a95f4bca4f01a)).\n- **libspiro** was updated to **20221101-5** ([@androidnisse](https://github.com/getsolus/packages/commit/5eb0e23283e1418f1364e2852de78cf7b23072e2)).\n- **libtorrent-rasterbar** was updated to **2.0.13-49** ([@Jaredy899](https://github.com/getsolus/packages/commit/fbeb0d62ea52057c463755ed2ee9ba59837b86ba)).\n- **libudev0-shim** was updated to **2-2** ([@androidnisse](https://github.com/getsolus/packages/commit/2fa9335ebcadc4d6125be39e5383fdeaf9c00e66)).\n- **libvirt-glib** was updated to **5.0.0-27** ([@androidnisse](https://github.com/getsolus/packages/commit/877da48455212c3f73b1e77d230686e091269f8e)).\n- **libwebkit-gtk** was updated to **2.52.6-148** ([@HarveyDevel](https://github.com/getsolus/packages/commit/3ada5050a3a7734249aef1f87310f4897bd104aa)).\n- **libwhich** was updated to **1.2.0-4** ([@androidnisse](https://github.com/getsolus/packages/commit/72808a44979edff3844727b7cbd368a1bf28c196)).\n- **lightdm** was updated to **1.33.1-52** ([@EbonJaeger](https://github.com/getsolus/packages/commit/bb5ca33c62fa7810fae2dcc3396cafc47c5b8693)).\n- **lightdm-gtk-greeter** was updated to **2.0.9-31** ([@EbonJaeger](https://github.com/getsolus/packages/commit/cd1918cf54b77e336014baf7112606ebacfb28b4)).\n- **lightdm-settings** was updated to **2.1.1-27** ([@EbonJaeger](https://github.com/getsolus/packages/commit/50a66feaac6b20435e03fbf59f8063d5762da70e)).\n- **linux-current** was updated to **7.1.9-354** ([@HarveyDevel](https://github.com/getsolus/packages/commit/11f6a151548fd14b4fdc2e0246ea885d2ada99af), [@HarveyDevel](https://github.com/getsolus/packages/commit/b8134403a6ec9e9947be76f646a2dbe290cb9bed)).\n- **linux-firmware** was updated to **20260810-108** ([@HarveyDevel](https://github.com/getsolus/packages/commit/44f9b1d02b2177b20338ed8fc180f683d0919c2d)).\n- **linux-lts** was updated to **6.18.45-304** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eb8336cf24483aee6512a241370ce2984032de94), [@HarveyDevel](https://github.com/getsolus/packages/commit/3de6b6dce070abfa9250832b2b57d0e4507eac81)).\n- **linux-tools** was updated to **7.1.9-139** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dc14c8d4f8ff372e0c4aaadcfbe9fef5d08c2760)).\n- **llvm** was updated to **21.1.8-137** ([@joebonrichie](https://github.com/getsolus/packages/commit/9d45529c4da464aadddc292e0e52d6bb758ebffc), [@joebonrichie](https://github.com/getsolus/packages/commit/faf7da11cbcb7076af256d7cb31aaf0cee0620e9)).\n- **localsearch** was updated to **3.11.1-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/2d47bfc516325555da6ba93ce1ee1da77ea2c947)).\n- **lsd2dsl** was updated to **0.6.0-6** ([@Jaredy899](https://github.com/getsolus/packages/commit/72bceeeda47b4a6d507496223b0c507c79256428)).\n- **luanti** was updated to **5.17.0-43** ([@davidjharder](https://github.com/getsolus/packages/commit/730c188731083de91cea750e489105b44501eb93)).\n- **lucene++** was updated to **3.0.9-17** ([@Jaredy899](https://github.com/getsolus/packages/commit/1c049b49f6df3f0cbf79ca289e37587da9e4d0c0)).\n- **luminance-hdr** was updated to **2.6.1.1-37** ([@Jaredy899](https://github.com/getsolus/packages/commit/14930ad3537871fcfebcccb86e3e72e3f8d79057), [@Jaredy899](https://github.com/getsolus/packages/commit/f9a1532c1918b590594fb51f31749265fe8b4d21)).\n- **mame** was updated to **0.289-54** ([@androidnisse](https://github.com/getsolus/packages/commit/542fbf5295e062aceb28cad3d5135d5489bddebd)).\n- **marble** was updated to **26.04.3-118** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c9330f77b04aad37903b88eee1cd9035d8902a9f)).\n- **melonds** was updated to **1.1-13** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1cdf2e43471c95ffb65a43cd69da4defa76d1577)).\n- **merkuro** was updated to **26.04.3-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4452408b6cad0e5012a058be7937a80a590bc6b3)).\n- **mgba** was updated to **0.10.5-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/4928cd2fb6222a4b13e187321e0a5a006cfa34ab)).\n- **milou** was updated to **6.7.4-144** ([@HarveyDevel](https://github.com/getsolus/packages/commit/00d83c922101d004741efc881982d3063edfa2b3)).\n- **mimetreeparser** was updated to **26.04.3-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/cd648358b4d677edaaaa71dd6f0d9af6fb462bd9)).\n- **mindforger** was updated to **2.0.0-7** ([@Jaredy899](https://github.com/getsolus/packages/commit/07f3c5597b82d4cc6ecc3db121ef33835218d3fc)).\n- **minidlna** was updated to **1.3.3-23** ([@Jaredy899](https://github.com/getsolus/packages/commit/6925d78258349ec73a51abc91a20a3cc6c6c3d8a), [@androidnisse](https://github.com/getsolus/packages/commit/08140055f61a5140f378ced77ae782e33100cdb3)).\n- **miopen** was updated to **7.2.0-10** ([@Jaredy899](https://github.com/getsolus/packages/commit/4f23f7f822be9dae78493aae25b876499cf04092)).\n- **mir** was updated to **2.28.0-16** ([@Jaredy899](https://github.com/getsolus/packages/commit/0786a82e06c71753a7a7d2c5a0194e876b28c872)).\n- **mixxx** was updated to **2.5.6-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f4cdcaf447fd875909727f3bbb64c1b37279f8c), [@androidnisse](https://github.com/getsolus/packages/commit/a82aeae045c877b6bfeed7173f5a9f523e4c13db), [@HarveyDevel](https://github.com/getsolus/packages/commit/734a565ae1caa77a4f3b67acf6eb1431b63956e4)).\n- **mkvtoolnix** was updated to **100.0-117** ([@androidnisse](https://github.com/getsolus/packages/commit/0f458053472cd4c7794416a48781c0046ec722ba), [@Jaredy899](https://github.com/getsolus/packages/commit/e62aac59ffecfa4300183542ec54e6c8528afac4)).\n- **mlt** was updated to **7.40.0-58** ([@Jaredy899](https://github.com/getsolus/packages/commit/0a3336fc95496a1d86a66c514f91b66a0e7d1828)).\n- **moc** was updated to **2.5.2-26** ([@Jaredy899](https://github.com/getsolus/packages/commit/3bff498767fd80db33fcd34d29a4b0d114a15905), [@androidnisse](https://github.com/getsolus/packages/commit/2e3a2fa8d2cec60d461634bd98d26e77db1ba1b1)).\n- **mozilla-vpn-client** was updated to **2.38.0-7** ([@HarveyDevel](https://github.com/getsolus/packages/commit/37b8f632f8405fb0b728b674a97d77f0e301c24a)).\n- **mpd** was updated to **0.24.9-108** ([@Jaredy899](https://github.com/getsolus/packages/commit/04ca5cddf38a0eb8d56567c7c4cc20343d068d00), [@androidnisse](https://github.com/getsolus/packages/commit/802d3cab2b1023e8ae3e235b7753f92a9dc6f509)).\n- **mpv** was updated to **0.41.0-135** ([@Jaredy899](https://github.com/getsolus/packages/commit/219386f9dbfff681189a857158c137711313b163)).\n- **mtxclient** was updated to **0.10.1-14** ([@EbonJaeger](https://github.com/getsolus/packages/commit/14e688623f215d56c81c0d08dd73c9b4c2f98de8)).\n- **musescore** was updated to **4.7.1-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ce36f0ee84981e0edd5a1b1f9ee219bc180ddc3f)).\n- **nano** was updated to **9.2-218** ([@HarveyDevel](https://github.com/getsolus/packages/commit/346823068ffd3cc9069dcd9b844de01cfa8aece3)).\n- **ncmpcpp** was updated to **0.10.1-46** ([@Jaredy899](https://github.com/getsolus/packages/commit/ca88cee7e0a37abe10d58cb186e646dd3c90d97c)).\n- **neochat** was updated to **26.04.3-61** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bac22abede1df19a9379f43b38d63069b61abc70)).\n- **netavark** was updated to **2.1.0-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/1bd58113f3312f16cd87d8ed11e7a73c28cf15b9)).\n- **netbird** was updated to **0.77.0-3** ([@sheepman4267](https://github.com/getsolus/packages/commit/438c936d519e9ea886982bc71901ff4e8459cadb)).\n- **newt** was updated to **0.52.25-14** ([@davidjharder](https://github.com/getsolus/packages/commit/321c822b2b18251548ae192df3c72c87b15fc76d)).\n- **nextcloud-client** was updated to **33.0.7-89** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2d9b1ced0cfa17df1e42604ab63480e2068452d5)).\n- **nextpnr** was updated to **0.10-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/ebe76392b388cdc347590170149aad40d5b9353e)).\n- **nheko** was updated to **0.12.1-29** ([@EbonJaeger](https://github.com/getsolus/packages/commit/396e44e637189f65803a607b44a41ccf91e06ca0)).\n- **nlohmann-json** was updated to **3.12.0-11** ([@androidnisse](https://github.com/getsolus/packages/commit/97d26530c2b2536360d453bc03dd329e4439f7ae)).\n- **nnn** was updated to **5.3-35** ([@davidjharder](https://github.com/getsolus/packages/commit/455e4d30bbe056d27e918ab06ae35cf3e007f8af)).\n- **notes** was updated to **2.3.1-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c1306d07393591e935f1a0236d465cb5572961aa)).\n- **nushell** was updated to **0.115.0-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/155aca8774f876531ac490bb7cdd3f7d88823bb5)).\n- **nvidia-470-glx-driver** was updated to **470.256.02-157** ([@HarveyDevel](https://github.com/getsolus/packages/commit/705769df7ab99acd653a6b0021c698fa2a34e4f1), [@HarveyDevel](https://github.com/getsolus/packages/commit/7f19b6f663dc07e29fbe79b9007a3f0fd04d71eb)).\n- **nvidia-580-glx-driver** was updated to **580.178.04-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b9b67bb5c43d76b6fa836af0074799e77d672181), [@HarveyDevel](https://github.com/getsolus/packages/commit/149befc6e27c0941f7b765dcc2406c40f27922a8)).\n- **nvidia-open** was updated to **610.57.04-44** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b5005fec6b5e740a1145e56185715ac42a90ed71), [@HarveyDevel](https://github.com/getsolus/packages/commit/03b49fde0711fd72a763fd62b0cdc8c14aa3f5da)).\n- **obs-studio** was updated to **32.0.4-134** ([@Jaredy899](https://github.com/getsolus/packages/commit/58d322eeaf87077dfcd45854d3d3d8b81f991b60), [@davidjharder](https://github.com/getsolus/packages/commit/b24d2b2db1ce778394c057a82ce9475988eb2e4a), [@HarveyDevel](https://github.com/getsolus/packages/commit/75efd9439d72d1a9491793ba29699655a1cd18fb)).\n- **okular** was updated to **26.04.3-127** ([@HarveyDevel](https://github.com/getsolus/packages/commit/815369f002043f55d3a0ee042b0cc4a840ce9f30)).\n- **open-vm-tools** was updated to **13.1.0-367** ([@HarveyDevel](https://github.com/getsolus/packages/commit/bbb8768b0f5dcd9f1913d8a78316b378972b5ee1), [@HarveyDevel](https://github.com/getsolus/packages/commit/377fe4c74a74bc48453fe42636b4feea0b89a782)).\n- **opencv** was updated to **4.13.0-51** ([@Jaredy899](https://github.com/getsolus/packages/commit/4966519746000718ad85afd609e78cfb71164063)).\n- **openimageio** was updated to **3.1.13.1-59** ([@Jaredy899](https://github.com/getsolus/packages/commit/310a7d0184b191ad92faea2dc3c6f445f234d361)).\n- **openjdk-21** was updated to **21.0.12-10** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f86035c0474db47137f905769b0d0dc3c909f3d)).\n- **openjfx-21** was updated to **21.0.5-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/3561022a01d31fa7566445d68330b2783d781cff)).\n- **openmw** was updated to **0.51.0-60** ([@Jaredy899](https://github.com/getsolus/packages/commit/e0c72997a770ca2f880cc9ded1397ce21051cfb1), [@Jaredy899](https://github.com/getsolus/packages/commit/be39763d7e287383250723a25d07ad8920f5728c)).\n- **openrazer** was updated to **3.12.4-393** ([@HarveyDevel](https://github.com/getsolus/packages/commit/64fd3fd47dee76661499ca379d6e3e6dde218002), [@HarveyDevel](https://github.com/getsolus/packages/commit/a81eb9ce862025b60794ff11ec136c26af252fcb)).\n- **openrct2** was updated to **0.5.3-71** ([@androidnisse](https://github.com/getsolus/packages/commit/e146b9dc1a67eb612122fd7f39f715f2a9e7a680)).\n- **openroad** was updated to **26.06.30-11** ([@Jaredy899](https://github.com/getsolus/packages/commit/e6ce144a9a1b74802e4cc1643adae309c981b97d)).\n- **openscad** was updated to **20260621-27** ([@Jaredy899](https://github.com/getsolus/packages/commit/6f56d46a68eae74a9505e94a05902bfbb35559af)).\n- **opentofu** was updated to **1.12.6-21** ([@davidjharder](https://github.com/getsolus/packages/commit/5af512f76893ac2048311d218926ac261bdeb23f)).\n- **openvdb** was updated to **12.0.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/8dfb5919830d0414109fe5d930b678cca6dc0af1)).\n- **openxr** was updated to **1.1.62-8** ([@HuricanDev](https://github.com/getsolus/packages/commit/fe10abe3db21064ac6ddce604234b35e223fc7b3)).\n- **opera-stable** was updated to **135.0.5973.41-404** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a9803971c5ebc69dec2cd71ee6ba0d4b783bdfc5), [@HarveyDevel](https://github.com/getsolus/packages/commit/27a2079054c840f6ba81d94c35e6040f77293d20)).\n- **opus-tools** was updated to **0.2-5** ([@androidnisse](https://github.com/getsolus/packages/commit/ed18aa4b1ad214afc82fe72940d77d49d7d2580b)).\n- **osinfo-db** was updated to **20251212-17** ([@davidjharder](https://github.com/getsolus/packages/commit/8ec77794e78965af9b8ccc7a0a2522f4b95f3c10)).\n- **osinfo-db-tools** was updated to **1.12.0-12** ([@davidjharder](https://github.com/getsolus/packages/commit/c52d9abc5e2fac87535ac55e65fec3008e43c2be)).\n- **owncloud-client** was updated to **6.0.0.17092-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8acd99a4d70144a0d7ab390cdc5304048c5f97a5)).\n- **oxygen** was updated to **6.7.4-140** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6dfaa7e0d47d9a4caef7ef4cd75e9a8193f9b04b)).\n- **oxygen-icons** was updated to **6.29.0-4** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b2d3cf05245be1e084cf533378a0e95ad7db6ab5)).\n- **passt** was updated to **2026.07.28-5** ([@Jaredy899](https://github.com/getsolus/packages/commit/423ef0229332a61d2b8e29a282a4b64b693908ce)).\n- **pcl** was updated to **1.15.0-11** ([@Jaredy899](https://github.com/getsolus/packages/commit/379dd8b6abc14826f5970b07bbe99496b230b9f3)).\n- **pelican** was updated to **4.12.0-12** ([@davidjharder](https://github.com/getsolus/packages/commit/468106cddd065629477f04b33dbe4484f32449dd)).\n- **pianobar** was updated to **2024.12.21-14** ([@Jaredy899](https://github.com/getsolus/packages/commit/3e33dd522940f56f3314dd51ce846d2bbabe14e9)).\n- **pipewire** was updated to **1.6.8-123** ([@Jaredy899](https://github.com/getsolus/packages/commit/b37037d16bb4e5fa1f8d2f330a3f52a5436169a4)).\n- **pkcs11-helper** was updated to **1.31.0-4** ([@davidjharder](https://github.com/getsolus/packages/commit/3f80db3ce7990fb922332ac01b4ab1eac072d30c)).\n- **plasma-activities** was updated to **6.7.4-55** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ad11791de206f022f70c71d5aec7c3160e845b79)).\n- **plasma-desktop** was updated to **6.7.4-186** ([@HarveyDevel](https://github.com/getsolus/packages/commit/146398f29360bc1e2974b077dc320dffecccb647)).\n- **plasma-integration** was updated to **6.7.4-153** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e01b05cbf1adda0929f901a41c3b1c848722e994)).\n- **plasma-keyboard** was updated to **6.7.4-11** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c6a13a0b7511e9715cd9b302d6919f2e8a81b796)).\n- **plasma-nm** was updated to **6.7.4-151** ([@HarveyDevel](https://github.com/getsolus/packages/commit/417409bff355c0bf9586cb531804a68a277d63e1)).\n- **plasma-pa** was updated to **6.7.4-147** ([@HarveyDevel](https://github.com/getsolus/packages/commit/def07e4583c50b013814714217c81201fb5b707f)).\n- **plasma-sdk** was updated to **6.7.4-128** ([@HarveyDevel](https://github.com/getsolus/packages/commit/43554a593a438cdbff2fe9b7e5c019b0d01aef40)).\n- **plasma-systemmonitor** was updated to **6.7.4-84** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b4d1ebd7d219ef58a8b15151dc8297640baed0fd)).\n- **plasma-welcome** was updated to **6.7.4-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f4cb0b7bfc7e035066fc949b9422c758334310d2)).\n- **plasma-workspace** was updated to **6.7.4-216** ([@HarveyDevel](https://github.com/getsolus/packages/commit/91ad98ed4cd2f8b650ada258d2ed907bd22a33b7)).\n- **plasma5support** was updated to **6.7.4-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/55faac3bb74f48094ee01440ea8f0db4a9a71530)).\n- **podman** was updated to **6.1.0-52** ([@Jaredy899](https://github.com/getsolus/packages/commit/b8e77a4c60d15f552b6b1a946a8a9163b58cfd56)).\n- **poedit** was updated to **3.9.1-54** ([@Jaredy899](https://github.com/getsolus/packages/commit/024d813269d697dc2464315d1ec1210fd381655d)).\n- **powerdevil** was updated to **6.7.4-157** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2811b65a1ba27c0550eeb830e5de2c60326a27fd)).\n- **print-manager** was updated to **6.7.4-131** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eaa9ba7c937bb042e4da08274b471de3da08d606)).\n- **pulseview** was updated to **0.4.2-18** ([@Jaredy899](https://github.com/getsolus/packages/commit/40dc2ea82b7d7635f84de5eafc34e70aba06fc47)).\n- **pyqt-builder** was updated to **1.19.1-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f18332c5cfbfc0b2024ed26d9d10b8e1838ef90a)).\n- **python-ast-serialize** was updated to **0.8.0-1** ([@clintre](https://github.com/getsolus/packages/commit/776fcaa093aa059d5f729ff903c121509f712e9a)).\n- **python-astroid** was updated to **4.3.1-43** ([@EbonJaeger](https://github.com/getsolus/packages/commit/dedfa1a5ce35302d1f3d4f40a3aa8f19e065dc45)).\n- **python-hatch-argparse-manpage** was updated to **1.0.2-2** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a4af950978f357a21f103842730e24733bc58390)).\n- **python-hatch-fancy-pypi-readme** was updated to **25.1.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/c794fce80ab343a011ecdce0eb145b208dbd9cb5)).\n- **python-hatch-nodejs-version** was updated to **0.4.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a44ae3e6b898485088428200c487fdef3c5ee1f5)).\n- **python-hatchling** was updated to **1.32.0-15** ([@EbonJaeger](https://github.com/getsolus/packages/commit/aa97312abdaa6405d2d0862ed244b4dc59fc0d78)).\n- **python-html2text** was updated to **2025.4.15-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a4931f7827ea940595b659663aeef1001883207a)).\n- **python-icecream** was updated to **2.2.0-7** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a3ff239c9401edc21227b2c15da922eb8e0d73f3)).\n- **python-icoextract** was updated to **0.3.0-3** ([@EbonJaeger](https://github.com/getsolus/packages/commit/29e411c7cd561928bc54f911506ca3d6212d46f3)).\n- **python-imagesize** was updated to **2.0.0-14** ([@EbonJaeger](https://github.com/getsolus/packages/commit/ad1ff70902fe7baba0e34a951e1e38a2fa147fc0)).\n- **python-injector** was updated to **0.24.0-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/cecb888a86074eff88ecb73ba4a7d7bfe1d77caf)).\n- **python-installer** was updated to **1.0.1-15** ([@EbonJaeger](https://github.com/getsolus/packages/commit/9365967ed976521456de896432f1a893951aa929)).\n- **python-intervaltree** was updated to **3.2.1-8** ([@EbonJaeger](https://github.com/getsolus/packages/commit/b4c94bcee58e824eb150b21ec71e70ec3fc6dcf1)).\n- **python-invoke** was updated to **3.0.3-16** ([@EbonJaeger](https://github.com/getsolus/packages/commit/fcb4e37630c00bdf2e7a2cbb22e5cc80aa2a85b5)).\n- **python-ipyparallel** was updated to **9.2.0-11** ([@EbonJaeger](https://github.com/getsolus/packages/commit/ec5b41c156d6affd699e025990cc0356be2ef464)).\n- **python-librt** was updated to **0.15.0-3** ([@clintre](https://github.com/getsolus/packages/commit/61ae4431df9fa7c6c64e5fd75404dd3c99a90103)).\n- **python-llvmlite** was updated to **0.49.0-23** ([@clintre](https://github.com/getsolus/packages/commit/cc77d648893a3db1e6fe4d073a5db33d9ddf461d)).\n- **python-lzma-mt** was updated to **0.2.1-3** ([@clintre](https://github.com/getsolus/packages/commit/a565255465fe2d56d35c4057f2402712ab88d40a)).\n- **python-markdown** was updated to **3.10.3-18** ([@clintre](https://github.com/getsolus/packages/commit/d1c233a2d8ddf64d54df219fdd5be60be4a1c092)).\n- **python-markdown-math** was updated to **0.9-10** ([@clintre](https://github.com/getsolus/packages/commit/2056f6dcb6fa6d023b40cc268198e3bea02ed0f8)).\n- **python-markupsafe** was updated to **3.0.3-19** ([@clintre](https://github.com/getsolus/packages/commit/d4da973e6cce2203dc00d2a5d5fd6b7393e203bf)).\n- **python-marshmallow** was updated to **4.3.1-13** ([@clintre](https://github.com/getsolus/packages/commit/f264a1365f7f3ca3cf45fdbbfe01dcfc0a0da5b1)).\n- **python-maturin** was updated to **1.14.1-71** ([@clintre](https://github.com/getsolus/packages/commit/f08aa090a3b820a78f7c0f2d348fcbb99c3ee13b)).\n- **python-mistune** was updated to **3.3.4-21** ([@clintre](https://github.com/getsolus/packages/commit/40d22e6c0fffcb2ea7dec82af69e8a01938f2409)). Includes security fixes for [CVE-2026-44897](https://nvd.nist.gov/vuln/detail/CVE-2026-44897), [CVE-2026-44899](https://nvd.nist.gov/vuln/detail/CVE-2026-44899), [CVE-2026-44708](https://nvd.nist.gov/vuln/detail/CVE-2026-44708).\n- **python-more-itertools** was updated to **11.1.0-13** ([@clintre](https://github.com/getsolus/packages/commit/d9da0baa0e132ec4acaa8a73def697e1a867e2a7)).\n- **python-mpi4py** was updated to **4.1.2-5** ([@clintre](https://github.com/getsolus/packages/commit/bf0594500c255b4db51cd0f6ca6012bbcb77912c)).\n- **python-mss** was updated to **10.2.0-8** ([@clintre](https://github.com/getsolus/packages/commit/140615bde8c27c27435dd566b4179d7337a6fc24)).\n- **python-mypy** was updated to **2.3.1-35** ([@clintre](https://github.com/getsolus/packages/commit/9b74c95d9f756d28de43739d2c222ddee353d346)).\n- **python-nbformat** was updated to **5.11.1-18** ([@clintre](https://github.com/getsolus/packages/commit/e31795d8e613ba4d3e1118511b2b021bf7a0fde9)).\n- **python-notebook** was updated to **7.6.2-21** ([@clintre](https://github.com/getsolus/packages/commit/6ab11b585bc69225f34e6ab14109a612d3d4019a)).\n- **python-numba** was updated to **0.67.0-19** ([@clintre](https://github.com/getsolus/packages/commit/3c4432ea5629fa62065f461537eb59cf1001f4e7)).\n- **python-numexpr** was updated to **2.14.2-20** ([@clintre](https://github.com/getsolus/packages/commit/39f0ca8ad19bd6787712ebe3ebe489d079c1ffa4)).\n- **python-numpydoc** was updated to **1.10.0-21** ([@clintre](https://github.com/getsolus/packages/commit/19cff825d52d8d43f0eec61e738ae8897e204fea)).\n- **python-oauthlib** was updated to **3.3.1-15** ([@clintre](https://github.com/getsolus/packages/commit/4b7ea387c4e4fe1fc9b434609b60bf75c0fbb100)).\n- **python-omemo-dr** was updated to **1.2.0-6** ([@clintre](https://github.com/getsolus/packages/commit/7f6d9aa9d87a9d8f6435f83b94343c122dc31024)).\n- **python-openssl** was updated to **26.4.0-26** ([@clintre](https://github.com/getsolus/packages/commit/8a5f81c0ec00d14f0e179f97aa5672ab02e01fe5)).\n- **python-optree** was updated to **0.19.1-5** ([@clintre](https://github.com/getsolus/packages/commit/62a3752d9702a17d19ccc3087f1e48bdfa03ad88)).\n- **python-pandas** was updated to **3.0.5-35** ([@clintre](https://github.com/getsolus/packages/commit/0e1c2b03425e66adf5805f4571bf0b5f3156bb28)).\n- **python-patsy** was updated to **1.0.2-13** ([@clintre](https://github.com/getsolus/packages/commit/0ec643d822087ee085202781499e32bf471e33eb)).\n- **python-pbs-installer** was updated to **2026.08.07-4** ([@clintre](https://github.com/getsolus/packages/commit/ab0d0d3c157c504122d84d6a22ea268469b11a01)).\n- **python-peewee** was updated to **4.3.0-22** ([@clintre](https://github.com/getsolus/packages/commit/be3b710238d3e6c0bfecfd222456ffad00e7c13a)).\n- **python-pydyf** was updated to **0.12.1-1** ([@clintre](https://github.com/getsolus/packages/commit/1e17d03fb493dd2a4e4fc702db7f7a82e5f2d1d1)).\n- **python-pyee** was updated to **14.0.0-13** ([@clintre](https://github.com/getsolus/packages/commit/f55de9960d0928e5d9c33c9c09a6079eb6b1c536)).\n- **python-pyphen** was updated to **0.17.2-1** ([@clintre](https://github.com/getsolus/packages/commit/6911fe4e62da7baf2cd7c38f6d655cc289c5f361)).\n- **python-pyqt6-sip** was updated to **13.12.0-27** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e0ba67e7da06644b13711bd82c95b9c322fe43f6)).\n- **python-pyqt6-webengine** was updated to **6.11.0-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5cc258f578bab6971953da57bcb5ad0f109fc6a6)).\n- **python-pyside6** was updated to **6.11.2-40** ([@HarveyDevel](https://github.com/getsolus/packages/commit/618a814ebe10958bbd4ed75fe74c73fc3c6dc025)).\n- **python-pytest-rerunfailures** was updated to **16.6-7** ([@clintre](https://github.com/getsolus/packages/commit/b4a7035325cd32eebf35a2c7ca3c9b8ac6b62b4d)).\n- **python-pytest-timeout** was updated to **2.5.0-13** ([@clintre](https://github.com/getsolus/packages/commit/fe3cbf1e9a8876277907a026e732d1dd0a0737c5)).\n- **python-pywayland** was updated to **0.4.19-3** ([@clintre](https://github.com/getsolus/packages/commit/9e84c8dc795ddd9dadc8f3bf6c210f5641067226)).\n- **python-qt6** was updated to **6.11.0-36** ([@HarveyDevel](https://github.com/getsolus/packages/commit/70a47b4f62c36c4709c3a0d2f583604e50975d96)).\n- **python-sip** was updated to **6.16.1-53** ([@HarveyDevel](https://github.com/getsolus/packages/commit/090c2bb25eef4d3d7b87c96fc008f1d9cd588698)).\n- **python-stevedore** was updated to **5.6.0-15** ([@clintre](https://github.com/getsolus/packages/commit/a6040136001a65b03f4bb1edb3a3af0cd8cb2856)).\n- **python-tenacity** was updated to **9.2.0-17** ([@clintre](https://github.com/getsolus/packages/commit/c9dc1b751cac16923974e96f1d9af73a2ee4e21f)).\n- **python-tifffile** was updated to **2026.8.16-12** ([@clintre](https://github.com/getsolus/packages/commit/bd31e3dcd965803d91cf678f7122d9428c5f6d56)).\n- **python-tinyhtml5** was updated to **2.1.0-1** ([@clintre](https://github.com/getsolus/packages/commit/e18bba6324d82402f88aaaffc07f7db6e6182972)).\n- **python-tornado** was updated to **6.5.8-22** ([@clintre](https://github.com/getsolus/packages/commit/7e9a9149d2d03de1323c80ef76a95c7a112fe682)).\n- **python-tox** was updated to **4.60.0-21** ([@clintre](https://github.com/getsolus/packages/commit/2fe343b0606e17023137cde89b15ecf2ed86f7df)).\n- **python-trio** was updated to **0.34.0-16** ([@clintre](https://github.com/getsolus/packages/commit/c38775aed8533759b06b23fae22928eb801e0e38)).\n- **python-txaio** was updated to **26.6.1-12** ([@clintre](https://github.com/getsolus/packages/commit/ee46b6bece25a73d4868464eba8871c3966824a4)).\n- **python-typing-inspection** was updated to **0.4.4-2** ([@clintre](https://github.com/getsolus/packages/commit/ad896cf1b757ce63b2de2b116dddef68a42672b9)).\n- **python-uv-dynamic-versioning** was updated to **0.14.1-3** ([@clintre](https://github.com/getsolus/packages/commit/10dabaddb126289c0a3d1a22a75e655b02782ba5)).\n- **python-watchfiles** was updated to **1.2.0-1** ([@davidjharder](https://github.com/getsolus/packages/commit/fd5ae31ca051f27f3bffa5ad02e068e9f3bf9e1a)).\n- **python-weasyprint** was updated to **69.0-1** ([@clintre](https://github.com/getsolus/packages/commit/2245e418ff59f60b57b5dcc2f7f1a71f10602bbd)).\n- **python-zipstream-ng** was updated to **1.9.3-7** ([@clintre](https://github.com/getsolus/packages/commit/49337ae55499e17e72a95379a72936d28f71a301)).\n- **qadwaitadecorations** was updated to **0.1.7-16** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4c13d4704f6423e1d9f087cd5cf95f6e7f4ca09d)).\n- **qbittorrent** was updated to **5.2.2-112** ([@HarveyDevel](https://github.com/getsolus/packages/commit/75cd2f0fbc82aad9f73b8e0c0f92e30ff4ce907a)).\n- **qcoro** was updated to **0.13.0-9** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86bb99917b2834487ccfa4d0f8c81e04ae570917)).\n- **qownnotes** was updated to **26.8.3-296** ([@Jaredy899](https://github.com/getsolus/packages/commit/d17d503ccd3544bc835efc5f118b7e5c257e96d4)).\n- **qt-creator** was updated to **20.0.1-80** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5259c9082167c466218a848cc3d3d07b0f4f68ff)).\n- **qt6-3d** was updated to **6.11.2-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/5991fce9533890930794b6fe80bb46734a6d2f08)).\n- **qt6-5compat** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a0d425326be139d9d6d9ec8e5e2049f8f4163dec)).\n- **qt6-base** was updated to **6.11.2-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4a04fd4a9968e7f6e1f8e53869b80b4155c9617b)).\n- **qt6-charts** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1db13612d003409e305bcc2f67b8ebf47ff30cdb)).\n- **qt6-connectivity** was updated to **6.11.2-23** ([@HarveyDevel](https://github.com/getsolus/packages/commit/918e1f77ffe7d442b4e1addb627f8d974fa9ac9f)).\n- **qt6-datavis3d** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0d962ea536a45c7a8aa8c259755e8296cac4d844)).\n- **qt6-declarative** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/9db0d8ea1dcb2f67742bb4a2b6d33e7453ae8792)).\n- **qt6-docs** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/731a76df6b1ee6117628b08c5fc117bc97688fac)).\n- **qt6-graphs** was updated to **6.11.2-3** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6e46720f7d1ffca6e8879e093abf2f69de3dea1e)).\n- **qt6-imageformats** was updated to **6.11.2-24** ([@HarveyDevel](https://github.com/getsolus/packages/commit/120ba842e2fa4a1cf2fa9f1e33cece4042441bbe)).\n- **qt6-languageserver** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/faf378b69c550498f4a10157d9ad5bfbf299a39d)).\n- **qt6-location** was updated to **6.11.2-18** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a7b0a6a7da89e734a3b08d7418b9bf11f73fd89e)).\n- **qt6-lottie** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/340253b091509b56daceb964152931f6a7360bae)).\n- **qt6-multimedia** was updated to **6.11.2-28** ([@Jaredy899](https://github.com/getsolus/packages/commit/d1259ab4870cea64879092dddc6fb513fbb6d94a), [@HarveyDevel](https://github.com/getsolus/packages/commit/3ca78a856353f6d4f2c56e5f732d825254de9816)).\n- **qt6-networkauth** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/081e9d99847072a38c1dad7a32d8878ac074da40)).\n- **qt6-positioning** was updated to **6.11.2-21** ([@HarveyDevel](https://github.com/getsolus/packages/commit/fecefee2f6e2c434c9119cbd77b5dcecb3b92b78)).\n- **qt6-quick3d** was updated to **6.11.2-25** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b0704ea4b078ff1292c128849bed5e932d78822a)).\n- **qt6-quicktimeline** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/abd2bdb37d42a0e1cd9aa2a9fd1ed0e78bda94fd)).\n- **qt6-remoteobjects** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0f788ddc21f2f5856b7d8be0777e93487c923fa0)).\n- **qt6-scxml** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec44208a7b281b1a2594f9cc37720a1a7a271cfa)).\n- **qt6-sensors** was updated to **6.11.2-23** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e191778f236c6685e035c14c943a42fcc2c2234a)).\n- **qt6-serialbus** was updated to **6.11.2-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b790383a9c2b6953ffc65039e2ae18e5c1ceb2f1)).\n- **qt6-serialport** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/640aa913b520e36bdd1a716f10235bbbc19eb341)).\n- **qt6-shadertools** was updated to **6.11.2-29** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ec632269d6d8767b9a46a93aa734290c18ee951a)).\n- **qt6-speech** was updated to **6.11.2-17** ([@HarveyDevel](https://github.com/getsolus/packages/commit/644e2d8ee1cdad994e94620ee6025b147bfd57df)).\n- **qt6-svg** was updated to **6.11.2-26** ([@HarveyDevel](https://github.com/getsolus/packages/commit/10be038e1b118bd4bc9730357a4f8a51d3765004)).\n- **qt6-tools** was updated to **6.11.2-37** ([@HarveyDevel](https://github.com/getsolus/packages/commit/85179bee9c9e14270c6408d03f4aece5d6b67850)).\n- **qt6-translations** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/514f9c9f76e9c67fea9fbf833b4cb9a6702f7cb5)).\n- **qt6-virtualkeyboard** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/b0754b6382b4d91a6e553e4cbfa966ad429e6717)).\n- **qt6-wayland** was updated to **6.11.2-31** ([@HarveyDevel](https://github.com/getsolus/packages/commit/d75ef882a17b731e09587a7f6bc9d73ba8ecd1e7)).\n- **qt6-webchannel** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/1d56e9289b27c3190caf70321e3684d6f15857ce)).\n- **qt6-webengine** was updated to **6.11.2-88** ([@Jaredy899](https://github.com/getsolus/packages/commit/ed26fbe4d54e1fa242719b48772532abf360d4bb), [@HarveyDevel](https://github.com/getsolus/packages/commit/6f06592004bfea028530c604229679bf06c20625)).\n- **qt6-websockets** was updated to **6.11.2-22** ([@HarveyDevel](https://github.com/getsolus/packages/commit/36204f2c4ee0a17d049e92c2e304506b446e80d8)).\n- **qt6-webview** was updated to **6.11.2-17** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4ae7e187dc5c243bdb0cf5d750603c5a0527e069)).\n- **qt6ct** was updated to **0.11-16** ([@HarveyDevel](https://github.com/getsolus/packages/commit/6bd2655bffb7462894df47b9265a5f0278857aef)).\n- **qt6gtk2** was updated to **0.7-20** ([@HarveyDevel](https://github.com/getsolus/packages/commit/92e99deac5c33bd76a479573140c4fc2933662de)).\n- **qtforkawesome** was updated to **0.3.4-2** ([@HuricanDev](https://github.com/getsolus/packages/commit/504a30e9c291ae0e318dfc2c69dfa0d37be5f896)).\n- **qtutilities** was updated to **6.22.0-2** ([@HuricanDev](https://github.com/getsolus/packages/commit/d5fa68f1027b239cd37e8fbcfe0196e4fe1e014f)).\n- **quakespasm** was updated to **0.96.1-18** ([@androidnisse](https://github.com/getsolus/packages/commit/2bd00e31cec39861ea4d24b8d4f302cfa4f375e1)).\n- **quassel** was updated to **0.14.0-18** ([@Jaredy899](https://github.com/getsolus/packages/commit/6e2b5df2a172ede1a042bcab6e788bee8245c45f)).\n- **quickshell** was updated to **0.3.0-10** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0db8eff659470987290a387bce057ac17991ae16)).\n- **radiotray-ng** was updated to **0.2.10.1-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/266b495405a4ed3ac474b07c3baf4af8a4cbdce2)).\n- **retroarch** was updated to **1.22.2-91** ([@Jaredy899](https://github.com/getsolus/packages/commit/f5d462d30ad1364d7313f450abdb01f59a0fc65e)).\n- **rio** was updated to **0.5.25-13** ([@Jaredy899](https://github.com/getsolus/packages/commit/3f634c9bdeef5cfcd6dc59c2422c940c064a4ec3)).\n- **rtl8852bu** was updated to **1.19.3-88** ([@HarveyDevel](https://github.com/getsolus/packages/commit/0acccc44a1a7b409707110e09c3ca1a6ed48c524), [@HarveyDevel](https://github.com/getsolus/packages/commit/c90a6ee430eed84d5f194705b5159637af2c697d)).\n- **scrcpy** was updated to **3.3.4-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/e61125a5fc2c054c32f3882bf03394ca18876e29)).\n- **scummvm** was updated to **2026.3.0-27** ([@androidnisse](https://github.com/getsolus/packages/commit/574a830599a46d684891ce311209f1a9db156256)).\n- **sddm** was updated to **0.21.0-61** ([@HarveyDevel](https://github.com/getsolus/packages/commit/da360a9627e1b6efe1c07bf0bf631f421d382b9d)).\n- **sdl1-mixer** was updated to **1.2.12-9** ([@androidnisse](https://github.com/getsolus/packages/commit/bb3fcede58ec6193bd56f2ef4f48f6fa900e6f1a)).\n- **sdl2-mixer** was updated to **2.8.0-18** ([@androidnisse](https://github.com/getsolus/packages/commit/54cfc4a73a852a69b77cd4fbc5238e1de118bcb6)).\n- **sfml** was updated to **2.6.2-16** ([@androidnisse](https://github.com/getsolus/packages/commit/12a39a88a1089d4c77f741a8b734dbca5744e04b)).\n- **shotcut** was updated to **26.8.1-54** ([@HarveyDevel](https://github.com/getsolus/packages/commit/eff586875820b905f5d910ab3e4950dd5baac8f3)).\n- **simplescreenrecorder** was updated to **0.4.4-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/0643ae1ebe3aaaca42c7369c4e8ad66d4fff6df0)).\n- **skrooge** was updated to **25.10.0-63** ([@HarveyDevel](https://github.com/getsolus/packages/commit/e056fcb0a8fdcbc2ee968c8efa58c8b358ff8950)).\n- **slick-greeter** was updated to **2.2.7-39** ([@EbonJaeger](https://github.com/getsolus/packages/commit/5062a28c7efcb1ee9686867ff7820bcc95b4db0e)).\n- **solidity** was updated to **0.8.35-7** ([@Jaredy899](https://github.com/getsolus/packages/commit/68f18a93ce232c221edadb5a439efc4b5f6e8cd1)).\n- **solseek** was updated to **1.5.0-49** ([@clintre](https://github.com/getsolus/packages/commit/0430d1c342ffe9ef07c4762036557236343dd4c1)).\n- **sox_ng** was updated to **14.8.0-34** ([@androidnisse](https://github.com/getsolus/packages/commit/2a792ef909add2e02c58942ad355d0a58fba2996)).\n- **spectacle** was updated to **6.7.4-131** ([@HarveyDevel](https://github.com/getsolus/packages/commit/86cfdf08895f620e9d2b04d1c12456f0993c1e02)).\n- **spek** was updated to **0.8.5-12** ([@Jaredy899](https://github.com/getsolus/packages/commit/9f83e6b9461e8335b869a7e5901d0ab593785092)).\n- **spyder3** was updated to **6.1.6-45** ([@Jaredy899](https://github.com/getsolus/packages/commit/0b965ffdc970bfd044cf829c14b47f2313f6142d)).\n- **stellarium** was updated to **26.2-46** ([@HarveyDevel](https://github.com/getsolus/packages/commit/a163d1cbbab8f23627417c831870e118b5daa140)).\n- **strawberry** was updated to **1.2.27-104** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2776e3ebbd9487e4c979e72d3a155035630cd5a0)).\n- **subtitlecomposer** was updated to **0.8.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/6c7bae7b8f03fae978ca7760e1547ddf6468ff18), [@HarveyDevel](https://github.com/getsolus/packages/commit/3918a6d6136ff68d67499482b66aad7ffefae094)).\n- **sudo** was updated to **1.9.17_p2-59** ([@EbonJaeger](https://github.com/getsolus/packages/commit/d2abc11db4f1c17010f4daae2ff6a7fda9678c22)).\n- **supercollider** was updated to **3.14.1-21** ([@Jaredy899](https://github.com/getsolus/packages/commit/dce0763b702c12a7ad1f7769795d2994bb749969)).\n- **syncthingtray** was updated to **2.1.4-4** ([@Jaredy899](https://github.com/getsolus/packages/commit/0677e1198cf73d73ffb9d092d0d4fe0ad35d45d8), [@HuricanDev](https://github.com/getsolus/packages/commit/fe4fb1318fbef4e0dfcbd1177bd001162d230e3b)).\n- **synfig** was updated to **1.5.5-39** ([@Jaredy899](https://github.com/getsolus/packages/commit/94bafe60ba41bb3ab7ad6857045b1a795d7ae4a2)).\n- **systemd** was updated to **261.2-190** ([@EbonJaeger](https://github.com/getsolus/packages/commit/da1afbec7f5b0814ec63f41cd7223bc67a203175)).\n- **systemsettings** was updated to **6.7.4-148** ([@HarveyDevel](https://github.com/getsolus/packages/commit/4f3e9a9174ab1318636fba3d39f87e2c5c8afe81)).\n- **tabularis** was updated to **0.20.0-2** ([@clintre](https://github.com/getsolus/packages/commit/0a90d2f7af8806930dbc9090dc3c274018397b1a)).\n- **tailscale** was updated to **1.102.3-64** ([@Jaredy899](https://github.com/getsolus/packages/commit/c46ffa3d15a1f73f31a13ddfe487dc74eea496fe)).\n- **telegram** was updated to **6.6.2-245** ([@Jaredy899](https://github.com/getsolus/packages/commit/c6549af1b0a491e6898eb6cfcf6aea6828340a2f), [@HarveyDevel](https://github.com/getsolus/packages/commit/9805828711081c1def877451fbef163ecee84ed1)).\n- **thunderbolt-software-user-space** was updated to **0.9.3-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/03b6bb807a5e42454d686f10711dabd947abc288)).\n- **tigervnc** was updated to **1.16.2-34** ([@Jaredy899](https://github.com/getsolus/packages/commit/6aceec6ef12b652fa0b81627aed3bc3fbbe5f995)).\n- **tiled** was updated to **1.12.2-30** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c69b0acb6bb26268c4421f78fd1bfe517d4835bc)).\n- **tmux** was updated to **3.7c-35** ([@Jaredy899](https://github.com/getsolus/packages/commit/15113311c5609e2e3f40e2b739d3f532741f0698)).\n- **tokodon** was updated to **26.04.3-38** ([@HarveyDevel](https://github.com/getsolus/packages/commit/97e11430efd6152885020492f0d112fab97a98ed)).\n- **unifdef** was updated to **2.12-3** ([@davidjharder](https://github.com/getsolus/packages/commit/d30ff737b84922d8ce8e073c680eaa79fb15f3d2)).\n- **unpaper** was updated to **7.0.0-8** ([@Jaredy899](https://github.com/getsolus/packages/commit/da2c86bf999c3be2a11e739bd5d8dcc084d8fdd8)).\n- **utsushi** was updated to **3.65.0-30** ([@Jaredy899](https://github.com/getsolus/packages/commit/be7457f3509983119e6f3a57d0dfa89b4cb82cbe)).\n- **v4l2loopback** was updated to **0.15.3-359** ([@HarveyDevel](https://github.com/getsolus/packages/commit/dc3ed8963bdf46b914241e4ec75b3e794a799bb3), [@HarveyDevel](https://github.com/getsolus/packages/commit/dd8806f07a9275ab41f78e797aa5012cb46620aa)).\n- **vcmi** was updated to **1.7.4-37** ([@Jaredy899](https://github.com/getsolus/packages/commit/7655d3a67446578ee2dcdc489e00acd33f3c3617), [@Jaredy899](https://github.com/getsolus/packages/commit/6ec413170e044f5ddfe918dc0e518ace1197e7eb)).\n- **vdpauinfo** was updated to **1.5-6** ([@davidjharder](https://github.com/getsolus/packages/commit/cf618e2ce605cf0c343d87af2f75df8889d91f2a)).\n- **vhba-module** was updated to **20260313-317** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2a1fdb9f38155808c067f07746f93f4815e898ff), [@HarveyDevel](https://github.com/getsolus/packages/commit/bbb328a5219f4c7c85f6176816087aa896428d01)).\n- **vice** was updated to **3.10-18** ([@androidnisse](https://github.com/getsolus/packages/commit/b8c9e3a245df501bf6151aa47792dd0068c7beac)).\n- **vim** was updated to **9.2.0992-173** ([@davidjharder](https://github.com/getsolus/packages/commit/fbc99553d41ea3a18ec635d0a55d146341da83d0)).\n- **virt-viewer** was updated to **11.0-27** ([@davidjharder](https://github.com/getsolus/packages/commit/78a389b2e1cfaab94425b48e1b01209435c38f82)).\n- **virtualbox** was updated to **7.2.14-400** ([@HarveyDevel](https://github.com/getsolus/packages/commit/f6d9091db63836b1160d855399acb5e3e014e874), [@clintre](https://github.com/getsolus/packages/commit/99b8ae33cb318d7bbc738aefded57718f393e13a)).\n- **visualboyadvance-m** was updated to **2.2.3-38** ([@Jaredy899](https://github.com/getsolus/packages/commit/5c028ba41d218e5767059686ae622f0b8b712ac6)).\n- **vivaldi-stable** was updated to **8.1.4087.68-365** ([@HarveyDevel](https://github.com/getsolus/packages/commit/8597f5f97349d0373e1c68b8e363c981e2b8ed06)).\n- **vlc** was updated to **3.0.23-203** ([@androidnisse](https://github.com/getsolus/packages/commit/aa5f19d9b2396914a70937e2791170871b41e557), [@davidjharder](https://github.com/getsolus/packages/commit/c0eeb077ef9c41cc4089c00fe1b7b4908ebf074e)).\n- **vorbis-tools** was updated to **1.4.3-10** ([@androidnisse](https://github.com/getsolus/packages/commit/226d168baa39c14e7ed35ed1277357d6a8732fa0)).\n- **vscode** was updated to **1.134.0-256** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ea1c6d66eefd70954def701d91d42e11fe8d3cf1)).\n- **wacomtablet** was updated to **6.7.4-64** ([@HarveyDevel](https://github.com/getsolus/packages/commit/c1fb6464e18465180a1448141e6c790cb66228b9)).\n- **waydroid** was updated to **1.6.3-4** ([@clintre](https://github.com/getsolus/packages/commit/ce03ba58c66791005921410c4d3c1cbe7b293aea)).\n- **wesnoth** was updated to **1.18.7-40** ([@Jaredy899](https://github.com/getsolus/packages/commit/b1c10a044daf482852c76aa774331a9c6941ad37)).\n- **wine** was updated to **11.15-217** ([@Jaredy899](https://github.com/getsolus/packages/commit/2746c73f4fd71975bce84affb8d3a01426015e35)).\n- **x264** was updated to **2025.06.08-21** ([@davidjharder](https://github.com/getsolus/packages/commit/05eb814c7b7d41e84bb93a5375eb01467829dd7e)).\n- **xdg-desktop-portal-kde** was updated to **6.7.4-134** ([@HarveyDevel](https://github.com/getsolus/packages/commit/32c8fef2f0b0cd25e581c2f33be2c126fb5a93e6)).\n- **xone** was updated to **0.5.8-129** ([@HarveyDevel](https://github.com/getsolus/packages/commit/ffdaaa36beacfa4fbb1dff5ce4892f352595c8ec), [@HarveyDevel](https://github.com/getsolus/packages/commit/cef5105c6fb1aa20ca3787918c511594f341918d)).\n- **xrt** was updated to **2.21.75-3** ([@Jaredy899](https://github.com/getsolus/packages/commit/137d1f92980607a15d9c7393d6c60848863d73ba)).\n- **yakuake** was updated to **26.04.3-93** ([@HarveyDevel](https://github.com/getsolus/packages/commit/862acb31f88bb7c745b4b2e533ee878e253ee341)).\n- **yazi** was updated to **26.8.15-9** ([@Jaredy899](https://github.com/getsolus/packages/commit/181308ee73331bd770e7407dbe9093964fbab679)).\n- **yelp-tools** was updated to **42.1-17** ([@davidjharder](https://github.com/getsolus/packages/commit/4b4bbe3fc73b4701eabe696ff03f7534b40d5070)).\n- **ypkg** was updated to **35.1.2-220** ([@joebonrichie](https://github.com/getsolus/packages/commit/718569feb6ddf0184463ec97f7e69f8fb470facd), [@joebonrichie](https://github.com/getsolus/packages/commit/475dbeb679612b8c14f7a836f26cddf9249fbdbf)).\n- **yt-dlp** was updated to **2026.08.19-274** ([@davidjharder](https://github.com/getsolus/packages/commit/4126ba7d7ab9cc814b7372ff4b8c3006bed7def5)).\n- **zeal** was updated to **0.9.1-29** ([@HarveyDevel](https://github.com/getsolus/packages/commit/2a9c0981e276220d77bf7790b86c98c6f8fc6912)).\n- **zellij** was updated to **0.45.0-21** ([@EbonJaeger](https://github.com/getsolus/packages/commit/9f7c9bf06ef20a08230bb226a4b0e46168603724)).\n- **zenergy** was updated to **1.0.3-47** ([@HarveyDevel](https://github.com/getsolus/packages/commit/7adffee901e01e22c1f16ed1404f6a24d14a9fcd), [@HarveyDevel](https://github.com/getsolus/packages/commit/f11020844e3598832f9dfc334bc58bfc1123bea3)).\n- **zip** was updated to **3.0-6** ([@EbonJaeger](https://github.com/getsolus/packages/commit/a5d24084c0ee90edcfea4c1e683d98dca7994dc3)).\n- **zita-convolver** was updated to **4.0.3-5** ([@davidjharder](https://github.com/getsolus/packages/commit/1be45d979a19dfd8f2c799d5c8af03bfbbd746fe)).\n- **zita-resampler** was updated to **1.11.2-4** ([@davidjharder](https://github.com/getsolus/packages/commit/79ce5b4f310fd7a52ec0facd576e0dccf758591b)).\n", "creation_timestamp": "2026-08-22T00:00:23.678602Z"}, {"uuid": "c47e3fc8-2436-4cbb-9147-8c269e3c6bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:15:06.734959Z"}, {"uuid": "41b48704-e467-428b-b124-56c3e5542692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "content": "", "creation_timestamp": "2026-07-08T10:15:05.960034Z"}, {"uuid": "965ac691-86aa-4a10-b84a-9871bc7d6a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "content": "", "creation_timestamp": "2026-07-09T10:15:09.714654Z"}, {"uuid": "b705a7a7-2cfc-4bb5-891c-86bd0f99a018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:00:03.125842Z"}, {"uuid": "aa94eba4-84f8-4f5d-a8f2-b46b0a45464f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40764", "type": "published-proof-of-concept", "source": "https://t.me/devsecops_weekly/556", "content": "Arbitrary command execution \u0447\u0435\u0440\u0435\u0437\u2026 Snyk CLI\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0442 Imperva, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043d\u0430\u0448\u043b\u0430 CVE-2022-40764, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u00abarbitrary command execution\u00bb \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Snyk CLI.\n\n\u0421\u0442\u0430\u0442\u044c\u044f \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0432 \u0438 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0434\u044b\u0445\u0430\u043d\u0438\u0438! \u041f\u043e\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a\u043e\u0439 \u043f\u0443\u0442\u044c:\n\ud83c\udf6d Monkey patch \u0434\u043b\u044f Snyk CLI \u0441 \u0446\u0435\u043b\u044c\u044e \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 NodeJS \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0437\u0430\u043f\u0443\u0441\u043a shell)\n\ud83c\udf6d \u0414\u0430, \u0432\u0441\u0435 \u0442\u0430\u043a, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e shell \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f! \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0447\u0438\u043d\u044b: \u0444\u0430\u0439\u043b vendor.json \u0438 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u041f\u0435\u0440\u0432\u044b\u0439 payload, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u00ab\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438\u00bb \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u043f\u043e\u043b\u0435 ignore\n\ud83c\udf6d \u0410 \u0432\u043e\u0442 \u0432\u0442\u043e\u0440\u043e\u0439\u2026 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043b\u044c\u043a\u0443\u043b\u044f\u0442\u043e\u0440 \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f!\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0443 Snyk \u0435\u0441\u0442\u044c VS Code plugin, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 CLI \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 IDE. \u041e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u043b \u00ab\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0439\u00bb \u043a\u043e\u0434 \u0432 VS Code. PoC-\u0440\u043e\u043b\u0438\u043a, \u043f\u0440\u0438\u043c\u0435\u0440\u044b monkey patch, payload\u2019\u043e\u0432 \u0438 \u043a\u043e\u0434 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u044f ignore \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Snyk, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0444\u0435\u043a\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u0430\u0442\u0447 \ud83d\ude0a", "creation_timestamp": "2026-08-16T00:00:50.108920Z"}, {"uuid": "8360863c-ecee-4aac-a75d-999d8f021f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/securixy_kz/699", "content": "https://twitter.com/naglinagli/status/1580622895734460416?t=6rg9INmiw19VEyNj1JPd_Q&s=09\n\nPoC for FortiOS  CVE-2022-40684", "creation_timestamp": "2026-07-12T22:00:13.493374Z"}, {"uuid": "8d991e9c-ae85-4433-8532-5deb1d4e75fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/securixy_kz/699", "content": "https://twitter.com/naglinagli/status/1580622895734460416?t=6rg9INmiw19VEyNj1JPd_Q&s=09\n\nPoC for FortiOS  CVE-2022-40684", "creation_timestamp": "2026-07-13T00:00:37.425762Z"}, {"uuid": "fbbda14b-b2d7-4412-a1b4-c8b7d13367d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/699", "content": "https://twitter.com/naglinagli/status/1580622895734460416?t=6rg9INmiw19VEyNj1JPd_Q&s=09\n\nPoC for FortiOS  CVE-2022-40684", "creation_timestamp": "2026-07-14T00:00:55.784243Z"}, {"uuid": "c1c12f03-4c76-4f09-9548-30a6a492e197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:08.883112Z"}, {"uuid": "d134e645-6dba-4a7b-a9fe-bd844a4cc844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:15.453417Z"}, {"uuid": "c36e4a6f-8141-4b40-a559-2d3572dc78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:15:13.549816Z"}, {"uuid": "6da81bc2-e75c-4df6-8a23-128094ff85db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "content": "", "creation_timestamp": "2026-08-16T10:00:03.445765Z"}, {"uuid": "54448737-b6a9-456c-90de-a824d34b3242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:08.935504Z"}, {"uuid": "710ba1d5-607e-4bed-9206-44f7eb11916f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:15:44.842373Z"}, {"uuid": "d7502678-03e3-4ec0-bfec-e58751a62d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:00:03.138816Z"}, {"uuid": "abc351fb-d806-405a-8b01-66511e0bd056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:15:08.373335Z"}, {"uuid": "aa0fe3c0-9546-43a3-8ed0-22b836637464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:00:03.433371Z"}, {"uuid": "8ea597cb-c032-4427-913e-bf776f56cc38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:15:05.923641Z"}, {"uuid": "f43b7300-3fa7-45cd-a496-f3818161497c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:07.109323Z"}, {"uuid": "f89bad38-775a-4514-be0f-c0bbfb8bebd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:11.382243Z"}, {"uuid": "f8e48dad-a8b4-4af8-aeb1-8b49e526971b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:06.757854Z"}, {"uuid": "06a204c6-6deb-4512-8e23-ef95dcb9bd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/breachdetect/1236428", "content": "{\n  \"Source\": \"xforums[.]st\",\n  \"Content\": \"Leaked 15k+ FortiGate VPN accounts including configuration files and VPN passwords via CVE-2022-40684\", \n  \"author\": \" (Anony)\",\n  \"Detection Date\": \"20 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:39.083528Z"}, {"uuid": "10b4ec01-8580-4093-9e8a-8e18dc8b3984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/breachdetect/1223754", "content": "{\n  \"Source\": \"xforums[.]st\",\n  \"Content\": \"Leaked 15k+ FortiGate VPN accounts including configuration files and VPN passwords via CVE-2022-40684\", \n  \"author\": \" (Anony)\",\n  \"Detection Date\": \"06 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:39.984659Z"}, {"uuid": "1e70a4b4-5ece-4217-b06c-b8907af9e676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "published-proof-of-concept", "source": "https://t.me/thehaking/2161", "content": "Downfall - \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432\n\n\u0414\u0430\u043d\u0438\u044d\u043b\u044c \u041c\u043e\u0433\u0438\u043c\u0438 (Daniel Moghimi) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u043c \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e, \u0432\u044b\u044f\u0432\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-40982) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432 XMM, YMM \u0438 ZMM, \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 AVX (Advanced Vector Extensions) \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u044f\u0434\u0440\u0435 CPU. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u0438\u043c\u044f Downfall, \u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0430 Gather Data Sampling (GDS).\n.\n.\n\ud83d\udc49 @sysadminoff\nhttps://www.opennet.ru/opennews/art.shtml?num=59571", "creation_timestamp": "2026-08-28T00:00:57.953419Z"}, {"uuid": "38b06275-5a6f-4888-91bc-4b6348ad9f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:00:06.313174Z"}, {"uuid": "4efc184d-a364-4d19-826a-8914658deed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/xhqcankao/5802", "content": "\u8c37\u6b4c\u63ed\u793aAMD/Intel\u5904\u7406\u5668\u5b89\u5168\u6f0f\u6d1e\uff1a\u201cDownfall\u201d(Intel)\u548c\u201cZenbleed\u201d(AMD)\n\n\u6628\u5929\uff0c\u8c37\u6b4c\u53d1\u5e03\u4e86\u4e00\u7bc7\u6587\u7ae0\uff0c\u63cf\u8ff0\u4e86\u7b2c6\u81f311\u4ee3\u82f1\u7279\u5c14CPU(\u547d\u540d\u4e3aDownfall\uff0cCVE-2022-40982)\u548cAMD Zen2(\u547d\u540d\u4e3aZenbleed\uff0cCVE-2023-20593)\u4e2d\u7684\u6f0f\u6d1e\u3002\u5728\u56e2\u961f\u53d1\u73b0\u8fd9\u4e9b\u6f0f\u6d1e\u540e\uff0c\u5df2\u53ca\u65f6\u901a\u77e5\u4e86\u6240\u6709\u53d7\u5f71\u54cd\u7684\u516c\u53f8\u3002\n\n\u82f1\u7279\u5c14\u5728\u201cintel-sa-00828\u201d\u7684\u5e16\u5b50\u4e2d\u5217\u51fa\u4e86\u6b64\u6f0f\u6d1e\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u4f60\u8fd8\u53ef\u4ee5\u5728\u6b64\u5904\u51c6\u786e\u4e86\u89e3\u54ea\u4e9b Intel CPU \u53d7\u5230\u5f71\u54cd\u3002\n\nAMD\u5728\u516c\u544a\u201cAMD-SB-7008\u201d\u4e2d\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u6b64\u6f0f\u6d1e\u3002\n\n\u2014\u2014 deskmodder.de", "creation_timestamp": "2026-08-25T00:00:24.136008Z"}, {"uuid": "d60a154c-b233-483e-922c-d8163a511873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:15:07.452294Z"}, {"uuid": "7589acac-42fc-4bb3-9c65-0c8349ca4dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:00:03.343052Z"}, {"uuid": "c497d3e6-d84e-4324-8a96-0ae26500e440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-22)", "content": "", "creation_timestamp": "2026-08-23T10:00:05.597900Z"}, {"uuid": "70fe4e0d-a7b7-49e8-af62-4d1fa2cdf1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:00:03.848770Z"}, {"uuid": "f85cd9c4-a06e-4e07-aa81-d87537ae3b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:05.905246Z"}, {"uuid": "e92695da-d340-4ac2-831e-b8035ec10e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cyberwarehouse/682", "content": "\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043d\u043e\u0432\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043b\u0438\u043b\u0438 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 15\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\u0441\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e.\n\n\u0410\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 Belsen Group \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0435\u0442\u044f\u0445 \u0438 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0431\u0440\u0435\u043d\u0434\u0430 Belsen Group \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 \u0432 Tor, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0430\u043c\u043f \u0434\u0430\u043d\u043d\u044b\u0445 FortiGate.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 FortiGate \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u0440\u0445\u0438\u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 1,6 \u0413\u0411 \u0441 \u043f\u0430\u043f\u043a\u0430\u043c\u0438, \u0443\u043f\u043e\u0440\u044f\u0434\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0441\u0442\u0440\u0430\u043d\u0430\u043c. \u041a\u0430\u0436\u0434\u0430\u044f \u043f\u0430\u043f\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u043f\u0430\u043f\u043a\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430 FortiGate \u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u041a\u0435\u0432\u0438\u043d\u0430 \u0411\u043e\u043c\u043e\u043d\u0442\u0430, \u043a\u0430\u0436\u0434\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u043c\u0435\u0435\u0442 configuration.conf \u0438 vpn-passwords.txt, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0442\u0435\u0447\u043a\u0430, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 0-day \u043e\u0442 2022 \u0433\u043e\u0434\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0411\u043e\u043c\u043e\u043d\u0434 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 CVE-2022\u201340684, \u0438 \u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u043c\u043f\u0435, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 \u0432 2022 \u0433\u043e\u0434\u0443 Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0443\u043b\u044f, CVE-2022\u201340684,\u00a0\u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 super_admin \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abfortigate-tech-support\u00bb.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u044f Heise \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 FortiOS 7.0.0-7.0.6 \u0438\u043b\u0438 7.2.0-7.2.2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432\u0435\u0440\u0441\u0438\u0435\u0439 7.2.0.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043d\u044b \u0432 2022 \u0433\u043e\u0434\u0443, \u043e\u043d\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c \u043c\u043e\u043c\u0435\u043d\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u0442\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u0435 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u044c\u0441\u044f \u0441 2021, \u043a\u043e\u0433\u0434\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043b\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 500 000 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Fortinet VPN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2018-13379, \u043d\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442.", "creation_timestamp": "2026-07-26T02:00:14.686727Z"}, {"uuid": "8d06d271-8ccb-4217-a55d-129b0442e0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/EchelonEyes/1827", "content": "\u041d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 Downfall \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043a\u0440\u0430\u0434\u0443\u0442 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u0435\n\n\u0421\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Downfall. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40982. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Intel \u043e\u0442 Skylake \u0434\u043e Ice Lake.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 Software Guard eXtensions (SGX) \u2014 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 Intel, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044f\u0435\u0442 \u043a\u043e\u0434 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f SGX \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u0430\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430.\n\n\u041c\u0435\u0442\u043e\u0434 Downfall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e \u0441\u0431\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0440 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0437\u0440\u043e\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \n\n\u00ab\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u0441\u0431\u043e\u0440\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0431\u0443\u0444\u0435\u0440, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0426\u041f, \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u043c \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f\u043c, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u044f\u0434\u0440\u0435\u00bb, - \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Google \u0414\u044d\u043d\u0438\u0435\u043b \u041c\u043e\u0433\u0438\u043c\u0438.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0434\u0432\u0430 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438 Downfall: \u0441\u0431\u043e\u0440 \u0432\u044b\u0431\u043e\u0440\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 (GDS) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (GVI), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 GDS \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (LVI), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0432 2020 \u0433\u043e\u0434\u0443.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 GDS, \u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c 128-\u0431\u0438\u0442\u043d\u044b\u0435 \u0438 256-\u0431\u0438\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 AES \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u0430\u0436\u0434\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438 \u0442\u043e\u0433\u043e \u0436\u0435 \u044f\u0434\u0440\u0430 \u0426\u041f. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a\u0438 GDS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043f\u043e\u043a\u043e\u044f \u0438\u0437-\u0437\u0430 \u0434\u0432\u0443\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u0426\u041f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0438\u043f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0431\u0443\u0444\u0435\u0440\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432 SIMD.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Intel \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Downfall/GDS \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u0422\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u043b\u0438\u0441\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0443\u0441\u043b\u0443\u0433 \u0441\u0432\u044f\u0437\u0438 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nIntel \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0440\u0438 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432:\n\n- Skylake (Skylake, Cascade Lake, Cooper Lake, Amber Lake, Kaby Lake, Coffee Lake, Whiskey Lake, Comet Lake);\n- Tiger Lake family;\n- Ice Lake family (Ice Lake, Rocket Lake).\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0432\u0438\u0446\u0435-\u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442 Intel \u043f\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u0438\u0432\u0435\u043a \u0422\u0438\u0432\u0430\u0440\u0438 \u0433\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u00ab\u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e [\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c] \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0431\u0443\u0434\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439\u00bb. \n\n\u00ab\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435, \u0447\u0442\u043e \u0438 \u0446\u0435\u043b\u044c, \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0447\u0442\u043e \u043d\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0441\u0440\u0435\u0434\u00bb - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Intel.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u0430\u0442\u0430\u043a Downfall/GDS \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0435\u0449\u0435 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432\u0430 \u043f\u043b\u0430\u0442\u0438\u0442\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0434 Downfall \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043d\u0430 GitHub.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-intel-cpus-steal-encryption-keys-data/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Intel", "creation_timestamp": "2026-07-26T02:02:23.794595Z"}, {"uuid": "bf3d3e79-f32b-447d-8b92-4f0ba4fc1101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/1173", "content": "Check Point: \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c\u0430\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 109-\u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u00ab\u041e\u0442\u0447\u0435\u0442 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 2023 \u0433\u043e\u0434: \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c \u0432 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u00ab\u0440\u0430\u0437\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f\u00bb (\u00ab2023 SECURITY REPORT: CYBERATTACKS REACH AN ALL-TIME HIGH IN RESPONSE TO GEO-POLITICAL CONFLICT, AND THE RISE OF \u2018DISRUPTION AND DESTRUCTION\u2019 MALWARE\u00bb). \u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0442\u0447\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 PDF-\u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u0438 \u0432 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0439\u043d\u043e\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0439 \u0433\u043e\u0434 \u043a\u0430\u043a \u0441\u0430\u043c\u044b\u0439 \u0445\u0430\u043e\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0439:\n\n- \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0430\u0441\u0441\u043e\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0441\u043b\u0430\u0432\u044f\u043d\u0441\u043a\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432 7 \u0440\u0430\u0437. \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c, \u043d\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 74% \u0432 \u0433\u043e\u0434\u043e\u0432\u043e\u043c \u0438\u0441\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0438.\n\n- \u0413\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u043e\u043c \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u044b\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043b\u0438\u0448\u044c \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u043e\u043f\u0430\u0441\u0430\u044f\u0441\u044c \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u0412 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043b\u0443\u0447\u0448\u0435 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435, \u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0436\u0434\u0435.\n\n- \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u2013 \u043d\u0430 48% \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 2021 \u0433\u043e\u0434\u043e\u043c. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0443\u0441\u043b\u0443\u0433\u0430\u043c, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u043e\u0431\u043b\u0430\u043a\u043e \u043b\u0430\u043a\u043e\u043c\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n- \u0414\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n- \u0423\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u044b\u0432 \u0432 \u043d\u0430\u0432\u044b\u043a\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430 Check Point \u0432 \u0445\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0418\u0411, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u0432 \u043c\u0438\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c (\u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a ProxyShell, Fortinet CVE-2022-40684 \u0438 CVE-2022-42475, Spring4Shell, Follina, CVE-2022-26138 \u0432 Atlassian Confluence \u0438 \u0434\u0440.). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Checkpoint \u0434\u0430\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 2022 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://research.checkpoint.com/2023/2023-security-report-cyberattacks-reach-an-all-time-high-in-response-to-geo-political-conflict-and-the-rise-of-disruption-and-destruction-malware/\n\n#\u043e\u0442\u0447\u0435\u0442 #CheckPoint", "creation_timestamp": "2026-07-26T02:02:30.702010Z"}, {"uuid": "7eb07480-0fbd-46f7-b780-0c912f4abe3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/EchelonEyes/919", "content": "Acer \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432. \u041e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-4020, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 UEFI, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a \u0440\u0443\u0442\u043a\u0438\u0442\u044b \u0438 \u0431\u0443\u0442\u043a\u0438\u0442\u044b, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u041e\u0421).\n\n\u00ab\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e)\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Acer.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Acer: Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Acer", "creation_timestamp": "2026-07-26T02:02:35.536134Z"}, {"uuid": "2635b856-afa1-44f1-a3f3-3707b5fa77f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-26T02:02:35.176686Z"}, {"uuid": "6da2090c-f1d9-4e08-9f8d-fea88d0bb952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-26T02:02:35.219437Z"}, {"uuid": "eafabf05-4b51-47c4-8fa7-5acb1186b811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/762", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0435\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40684 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6), \u043e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430: user=\"Local_Process_Access\".\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:\n\n- FortiOS \u043e\u0442 7.2.0 \u0434\u043e 7.2.1 \u0438 \u043e\u04427.0.0 \u0434\u043e 7.0.6;\n- FortiProxy 7.2.0 \u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6;\n- FortiSwitchManager 7.2.0 \u0438 7.0.0.\n\nFortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.fortiguard.com/psirt/FG-IR-22-377 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Fortinet", "creation_timestamp": "2026-07-26T02:02:37.864600Z"}, {"uuid": "6467e7e8-1a08-434c-9c2f-2a78fc5de15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-26T02:02:40.323501Z"}, {"uuid": "78c911aa-091d-47d0-8fed-555c0a9321e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-26T02:02:40.461508Z"}, {"uuid": "6f6d572a-6c7a-45f9-b0f2-6fd6c44a6ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-26T02:02:40.495003Z"}, {"uuid": "565c0ea3-c9b4-489d-bf34-87764dab37c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-26T02:02:40.643877Z"}, {"uuid": "8a71e2b9-1ea7-48eb-b30a-f3d1c8827e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-26T07:00:58.225425Z"}, {"uuid": "d3167b73-9a9a-47a1-9508-4e942ce50f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:00:07.618548Z"}, {"uuid": "d4179a58-0619-4c6d-8581-88ec600b04bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/cyberwarehouse/682", "content": "\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043d\u043e\u0432\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043b\u0438\u043b\u0438 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 15\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\u0441\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e.\n\n\u0410\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 Belsen Group \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0435\u0442\u044f\u0445 \u0438 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0431\u0440\u0435\u043d\u0434\u0430 Belsen Group \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 \u0432 Tor, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0430\u043c\u043f \u0434\u0430\u043d\u043d\u044b\u0445 FortiGate.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 FortiGate \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u0440\u0445\u0438\u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 1,6 \u0413\u0411 \u0441 \u043f\u0430\u043f\u043a\u0430\u043c\u0438, \u0443\u043f\u043e\u0440\u044f\u0434\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0441\u0442\u0440\u0430\u043d\u0430\u043c. \u041a\u0430\u0436\u0434\u0430\u044f \u043f\u0430\u043f\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u043f\u0430\u043f\u043a\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430 FortiGate \u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u041a\u0435\u0432\u0438\u043d\u0430 \u0411\u043e\u043c\u043e\u043d\u0442\u0430, \u043a\u0430\u0436\u0434\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u043c\u0435\u0435\u0442 configuration.conf \u0438 vpn-passwords.txt, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0442\u0435\u0447\u043a\u0430, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 0-day \u043e\u0442 2022 \u0433\u043e\u0434\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2022-40684, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0411\u043e\u043c\u043e\u043d\u0434 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 CVE-2022\u201340684, \u0438 \u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u043c\u043f\u0435, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 \u0432 2022 \u0433\u043e\u0434\u0443 Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0443\u043b\u044f, CVE-2022\u201340684,\u00a0\u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiGate \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 super_admin \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abfortigate-tech-support\u00bb.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u044f Heise \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 FortiOS 7.0.0-7.0.6 \u0438\u043b\u0438 7.2.0-7.2.2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432\u0435\u0440\u0441\u0438\u0435\u0439 7.2.0.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043d\u044b \u0432 2022 \u0433\u043e\u0434\u0443, \u043e\u043d\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c \u043c\u043e\u043c\u0435\u043d\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u0442\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u0435 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u044c\u0441\u044f \u0441 2021, \u043a\u043e\u0433\u0434\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043b\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 500 000 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Fortinet VPN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2018-13379, \u043d\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442.", "creation_timestamp": "2026-07-27T00:00:27.392894Z"}, {"uuid": "56342da1-498f-45d9-a070-574cc6ab085e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/EchelonEyes/1827", "content": "\u041d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 Downfall \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043a\u0440\u0430\u0434\u0443\u0442 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u0435\n\n\u0421\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Downfall. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40982. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Intel \u043e\u0442 Skylake \u0434\u043e Ice Lake.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 Software Guard eXtensions (SGX) \u2014 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 Intel, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044f\u0435\u0442 \u043a\u043e\u0434 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f SGX \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u0430\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430.\n\n\u041c\u0435\u0442\u043e\u0434 Downfall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e \u0441\u0431\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0440 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0437\u0440\u043e\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \n\n\u00ab\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u0441\u0431\u043e\u0440\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0431\u0443\u0444\u0435\u0440, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0426\u041f, \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u043c \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f\u043c, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u044f\u0434\u0440\u0435\u00bb, - \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Google \u0414\u044d\u043d\u0438\u0435\u043b \u041c\u043e\u0433\u0438\u043c\u0438.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0434\u0432\u0430 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438 Downfall: \u0441\u0431\u043e\u0440 \u0432\u044b\u0431\u043e\u0440\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 (GDS) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (GVI), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 GDS \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (LVI), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0432 2020 \u0433\u043e\u0434\u0443.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 GDS, \u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c 128-\u0431\u0438\u0442\u043d\u044b\u0435 \u0438 256-\u0431\u0438\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 AES \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u0430\u0436\u0434\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438 \u0442\u043e\u0433\u043e \u0436\u0435 \u044f\u0434\u0440\u0430 \u0426\u041f. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a\u0438 GDS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043f\u043e\u043a\u043e\u044f \u0438\u0437-\u0437\u0430 \u0434\u0432\u0443\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u0426\u041f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0438\u043f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0431\u0443\u0444\u0435\u0440\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432 SIMD.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Intel \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Downfall/GDS \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u0422\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u043b\u0438\u0441\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0443\u0441\u043b\u0443\u0433 \u0441\u0432\u044f\u0437\u0438 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nIntel \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0440\u0438 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432:\n\n- Skylake (Skylake, Cascade Lake, Cooper Lake, Amber Lake, Kaby Lake, Coffee Lake, Whiskey Lake, Comet Lake);\n- Tiger Lake family;\n- Ice Lake family (Ice Lake, Rocket Lake).\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0432\u0438\u0446\u0435-\u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442 Intel \u043f\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u0438\u0432\u0435\u043a \u0422\u0438\u0432\u0430\u0440\u0438 \u0433\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u00ab\u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e [\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c] \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0431\u0443\u0434\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439\u00bb. \n\n\u00ab\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435, \u0447\u0442\u043e \u0438 \u0446\u0435\u043b\u044c, \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0447\u0442\u043e \u043d\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0441\u0440\u0435\u0434\u00bb - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Intel.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u0430\u0442\u0430\u043a Downfall/GDS \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0435\u0449\u0435 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432\u0430 \u043f\u043b\u0430\u0442\u0438\u0442\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0434 Downfall \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043d\u0430 GitHub.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-intel-cpus-steal-encryption-keys-data/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Intel", "creation_timestamp": "2026-07-27T00:00:59.322500Z"}, {"uuid": "089ca5dc-a08b-446c-b432-8eb3e1e36c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-27T00:01:06.548311Z"}, {"uuid": "e990a2e1-fcd4-4f39-b231-b63c34554319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/1173", "content": "Check Point: \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c\u0430\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 109-\u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u00ab\u041e\u0442\u0447\u0435\u0442 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 2023 \u0433\u043e\u0434: \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c \u0432 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u00ab\u0440\u0430\u0437\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f\u00bb (\u00ab2023 SECURITY REPORT: CYBERATTACKS REACH AN ALL-TIME HIGH IN RESPONSE TO GEO-POLITICAL CONFLICT, AND THE RISE OF \u2018DISRUPTION AND DESTRUCTION\u2019 MALWARE\u00bb). \u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0442\u0447\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 PDF-\u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u0438 \u0432 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0439\u043d\u043e\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0439 \u0433\u043e\u0434 \u043a\u0430\u043a \u0441\u0430\u043c\u044b\u0439 \u0445\u0430\u043e\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0439:\n\n- \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0430\u0441\u0441\u043e\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0441\u043b\u0430\u0432\u044f\u043d\u0441\u043a\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432 7 \u0440\u0430\u0437. \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c, \u043d\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 74% \u0432 \u0433\u043e\u0434\u043e\u0432\u043e\u043c \u0438\u0441\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0438.\n\n- \u0413\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u043e\u043c \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u044b\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043b\u0438\u0448\u044c \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u043e\u043f\u0430\u0441\u0430\u044f\u0441\u044c \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u0412 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043b\u0443\u0447\u0448\u0435 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435, \u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0436\u0434\u0435.\n\n- \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u2013 \u043d\u0430 48% \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 2021 \u0433\u043e\u0434\u043e\u043c. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0443\u0441\u043b\u0443\u0433\u0430\u043c, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u043e\u0431\u043b\u0430\u043a\u043e \u043b\u0430\u043a\u043e\u043c\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n- \u0414\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n- \u0423\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u044b\u0432 \u0432 \u043d\u0430\u0432\u044b\u043a\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430 Check Point \u0432 \u0445\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0418\u0411, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u0432 \u043c\u0438\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c (\u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a ProxyShell, Fortinet CVE-2022-40684 \u0438 CVE-2022-42475, Spring4Shell, Follina, CVE-2022-26138 \u0432 Atlassian Confluence \u0438 \u0434\u0440.). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Checkpoint \u0434\u0430\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 2022 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://research.checkpoint.com/2023/2023-security-report-cyberattacks-reach-an-all-time-high-in-response-to-geo-political-conflict-and-the-rise-of-disruption-and-destruction-malware/\n\n#\u043e\u0442\u0447\u0435\u0442 #CheckPoint", "creation_timestamp": "2026-07-27T00:01:07.414515Z"}, {"uuid": "a82ef82f-d96f-4ce5-bd06-b88d3182300d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-27T00:01:11.198607Z"}, {"uuid": "3b2aa708-0fcd-4b15-8e88-d7dd0354fa21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-27T00:01:11.241595Z"}, {"uuid": "b7ead394-9245-4ddf-9fde-8ba69649a1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/EchelonEyes/919", "content": "Acer \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432. \u041e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-4020, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 UEFI, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a \u0440\u0443\u0442\u043a\u0438\u0442\u044b \u0438 \u0431\u0443\u0442\u043a\u0438\u0442\u044b, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u041e\u0421).\n\n\u00ab\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e)\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Acer.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Acer: Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Acer", "creation_timestamp": "2026-07-27T00:01:11.557998Z"}, {"uuid": "2942b581-97b2-4e1b-9510-5f04bac9917f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/762", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0435\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40684 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6), \u043e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430: user=\"Local_Process_Access\".\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:\n\n- FortiOS \u043e\u0442 7.2.0 \u0434\u043e 7.2.1 \u0438 \u043e\u04427.0.0 \u0434\u043e 7.0.6;\n- FortiProxy 7.2.0 \u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6;\n- FortiSwitchManager 7.2.0 \u0438 7.0.0.\n\nFortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.fortiguard.com/psirt/FG-IR-22-377 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Fortinet", "creation_timestamp": "2026-07-27T00:01:14.846951Z"}, {"uuid": "01984b9c-2bac-4678-80a8-6a207236ff40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-27T00:01:16.311829Z"}, {"uuid": "42843f21-ba01-4a5a-a2b4-d18e7829b528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-27T00:01:15.941356Z"}, {"uuid": "4aca2bed-2470-4ccf-825d-ebf9c964b250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-27T00:01:16.083707Z"}, {"uuid": "9f4bede2-f85e-4125-9c5e-a482c5d35dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-27T00:01:16.128953Z"}, {"uuid": "162c2d6b-1d6c-432c-ad1c-1f91d3bdfd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:00:03.912559Z"}, {"uuid": "ff270a44-92b9-4919-9aae-cb7f8514708d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1827", "content": "\u041d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 Downfall \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043a\u0440\u0430\u0434\u0443\u0442 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u0435\n\n\u0421\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Downfall. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40982. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Intel \u043e\u0442 Skylake \u0434\u043e Ice Lake.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 Software Guard eXtensions (SGX) \u2014 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 Intel, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044f\u0435\u0442 \u043a\u043e\u0434 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f SGX \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u0430\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430.\n\n\u041c\u0435\u0442\u043e\u0434 Downfall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e \u0441\u0431\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0440 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0437\u0440\u043e\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \n\n\u00ab\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u0441\u0431\u043e\u0440\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0431\u0443\u0444\u0435\u0440, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0426\u041f, \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u043c \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f\u043c, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u044f\u0434\u0440\u0435\u00bb, - \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Google \u0414\u044d\u043d\u0438\u0435\u043b \u041c\u043e\u0433\u0438\u043c\u0438.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0434\u0432\u0430 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438 Downfall: \u0441\u0431\u043e\u0440 \u0432\u044b\u0431\u043e\u0440\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 (GDS) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (GVI), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 GDS \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (LVI), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0432 2020 \u0433\u043e\u0434\u0443.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 GDS, \u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c 128-\u0431\u0438\u0442\u043d\u044b\u0435 \u0438 256-\u0431\u0438\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 AES \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u0430\u0436\u0434\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0440\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438 \u0442\u043e\u0433\u043e \u0436\u0435 \u044f\u0434\u0440\u0430 \u0426\u041f. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a\u0438 GDS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043f\u043e\u043a\u043e\u044f \u0438\u0437-\u0437\u0430 \u0434\u0432\u0443\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u0426\u041f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0438\u043f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0431\u0443\u0444\u0435\u0440\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432 SIMD.\n\n\u041c\u043e\u0433\u0438\u043c\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Intel \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Downfall/GDS \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u0422\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u043b\u0438\u0441\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0443\u0441\u043b\u0443\u0433 \u0441\u0432\u044f\u0437\u0438 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nIntel \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0440\u0438 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432:\n\n- Skylake (Skylake, Cascade Lake, Cooper Lake, Amber Lake, Kaby Lake, Coffee Lake, Whiskey Lake, Comet Lake);\n- Tiger Lake family;\n- Ice Lake family (Ice Lake, Rocket Lake).\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0432\u0438\u0446\u0435-\u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442 Intel \u043f\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u0438\u0432\u0435\u043a \u0422\u0438\u0432\u0430\u0440\u0438 \u0433\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u00ab\u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e [\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c] \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0431\u0443\u0434\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439\u00bb. \n\n\u00ab\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435, \u0447\u0442\u043e \u0438 \u0446\u0435\u043b\u044c, \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0447\u0442\u043e \u043d\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0441\u0440\u0435\u0434\u00bb - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Intel.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u0430\u0442\u0430\u043a Downfall/GDS \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0435\u0449\u0435 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432\u0430 \u043f\u043b\u0430\u0442\u0438\u0442\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0434 Downfall \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043d\u0430 GitHub.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-intel-cpus-steal-encryption-keys-data/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Intel", "creation_timestamp": "2026-07-28T00:00:24.306742Z"}, {"uuid": "bfd9c524-a9dc-47f9-9c17-bb6c1c7833e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-28T01:00:05.477421Z"}, {"uuid": "8d67474e-4c3e-4b85-9d9c-eab3bb774f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/1173", "content": "Check Point: \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c\u0430\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 109-\u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u00ab\u041e\u0442\u0447\u0435\u0442 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 2023 \u0433\u043e\u0434: \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c \u0432 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u00ab\u0440\u0430\u0437\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f\u00bb (\u00ab2023 SECURITY REPORT: CYBERATTACKS REACH AN ALL-TIME HIGH IN RESPONSE TO GEO-POLITICAL CONFLICT, AND THE RISE OF \u2018DISRUPTION AND DESTRUCTION\u2019 MALWARE\u00bb). \u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0442\u0447\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 PDF-\u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u0438 \u0432 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0439\u043d\u043e\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0439 \u0433\u043e\u0434 \u043a\u0430\u043a \u0441\u0430\u043c\u044b\u0439 \u0445\u0430\u043e\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0439:\n\n- \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0430\u0441\u0441\u043e\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0441\u043b\u0430\u0432\u044f\u043d\u0441\u043a\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432 7 \u0440\u0430\u0437. \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c, \u043d\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 74% \u0432 \u0433\u043e\u0434\u043e\u0432\u043e\u043c \u0438\u0441\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0438.\n\n- \u0413\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u043e\u043c \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u044b\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043b\u0438\u0448\u044c \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u043e\u043f\u0430\u0441\u0430\u044f\u0441\u044c \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u0412 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043b\u0443\u0447\u0448\u0435 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435, \u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0436\u0434\u0435.\n\n- \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u2013 \u043d\u0430 48% \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 2021 \u0433\u043e\u0434\u043e\u043c. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0443\u0441\u043b\u0443\u0433\u0430\u043c, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u043e\u0431\u043b\u0430\u043a\u043e \u043b\u0430\u043a\u043e\u043c\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n- \u0414\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n- \u0423\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u044b\u0432 \u0432 \u043d\u0430\u0432\u044b\u043a\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430 Check Point \u0432 \u0445\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0418\u0411, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u0432 \u043c\u0438\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c (\u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a ProxyShell, Fortinet CVE-2022-40684 \u0438 CVE-2022-42475, Spring4Shell, Follina, CVE-2022-26138 \u0432 Atlassian Confluence \u0438 \u0434\u0440.). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Checkpoint \u0434\u0430\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 2022 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://research.checkpoint.com/2023/2023-security-report-cyberattacks-reach-an-all-time-high-in-response-to-geo-political-conflict-and-the-rise-of-disruption-and-destruction-malware/\n\n#\u043e\u0442\u0447\u0435\u0442 #CheckPoint", "creation_timestamp": "2026-07-28T02:00:05.244428Z"}, {"uuid": "9bb1f98a-b3f9-46f5-8fa6-849f8af204d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-28T04:00:05.359187Z"}, {"uuid": "3b5ed339-fde3-45fe-97ff-d265eaec7d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-28T04:00:05.407118Z"}, {"uuid": "e9c28fa8-476a-46a5-b84c-b26b4ea8f53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/EchelonEyes/919", "content": "Acer \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432. \u041e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-4020, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 UEFI, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a \u0440\u0443\u0442\u043a\u0438\u0442\u044b \u0438 \u0431\u0443\u0442\u043a\u0438\u0442\u044b, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u041e\u0421).\n\n\u00ab\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e)\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Acer.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Acer: Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Acer", "creation_timestamp": "2026-07-28T05:00:04.770455Z"}, {"uuid": "7a1aa70a-59a7-4b7c-bd74-8149c41372ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/EchelonEyes/762", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0435\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40684 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6), \u043e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430: user=\"Local_Process_Access\".\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:\n\n- FortiOS \u043e\u0442 7.2.0 \u0434\u043e 7.2.1 \u0438 \u043e\u04427.0.0 \u0434\u043e 7.0.6;\n- FortiProxy 7.2.0 \u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6;\n- FortiSwitchManager 7.2.0 \u0438 7.0.0.\n\nFortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.fortiguard.com/psirt/FG-IR-22-377 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Fortinet", "creation_timestamp": "2026-07-28T07:00:06.590393Z"}, {"uuid": "1cf5a174-f930-4772-a2a9-f101f2166341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-28T08:00:05.355915Z"}, {"uuid": "1854c1b8-fcf6-4c6a-b4a1-7f8edbab460f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-28T08:00:05.402141Z"}, {"uuid": "2b50353a-3023-417d-9653-2a55df07d3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-28T08:00:05.453213Z"}, {"uuid": "b2f49318-0dd8-4409-81da-f0bca60ebb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-28T08:00:05.543980Z"}, {"uuid": "729a5241-fa15-4814-bc0f-fdbcf9c6be77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:00:05.570806Z"}, {"uuid": "693a6b2b-f197-4992-aed4-0caacc4842a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:20.115215Z"}, {"uuid": "f9b7a4f8-46c4-496b-9e68-a1d7da341142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-29T00:00:43.135595Z"}, {"uuid": "dc20fb0f-01d4-476e-a932-4f355e2e324e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-29T00:00:43.176233Z"}, {"uuid": "29a8a9f3-9ce4-4870-ad56-52bfc647bad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-29T00:00:43.222860Z"}, {"uuid": "a71bdf67-b796-4537-9c4c-64e1084c3e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-29T00:00:43.305203Z"}, {"uuid": "70066660-b13d-4a85-8fa5-fdc464a1374a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/EchelonEyes/762", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0435\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-40684 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6), \u043e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 FortiOS, FortiProxy \u0438 FortiSwitchManager. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430: user=\"Local_Process_Access\".\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:\n\n- FortiOS \u043e\u0442 7.2.0 \u0434\u043e 7.2.1 \u0438 \u043e\u04427.0.0 \u0434\u043e 7.0.6;\n- FortiProxy 7.2.0 \u0438 \u043e\u0442 7.0.0 \u0434\u043e 7.0.6;\n- FortiSwitchManager 7.2.0 \u0438 7.0.0.\n\nFortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.fortiguard.com/psirt/FG-IR-22-377 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Fortinet", "creation_timestamp": "2026-07-29T00:00:44.297918Z"}, {"uuid": "301a1ed5-f888-450a-a0a1-a1f542d1abb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/EchelonEyes/919", "content": "Acer \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Acer \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432. \u041e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-4020, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 UEFI, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 HQSwSmiDxe DXE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a \u0440\u0443\u0442\u043a\u0438\u0442\u044b \u0438 \u0431\u0443\u0442\u043a\u0438\u0442\u044b, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u041e\u0421).\n\n\u00ab\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 NVRAM (\u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e)\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Acer.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-4020 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Acer: Aspire A315-22, A115-21, A315-22G, Extensa EX215-21 \u0438 EX215-21G. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Acer", "creation_timestamp": "2026-07-29T00:00:47.729240Z"}, {"uuid": "d59a78aa-4b39-4e28-90af-47769666b549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40259", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-29T00:00:48.511027Z"}, {"uuid": "ea65f185-9f65-40be-91b5-f9aff483b160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40242", "type": "seen", "source": "https://t.me/EchelonEyes/939", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 AMI MegaRAC \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b AMD, ARM, HPE, Dell \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MegaRAC Baseboard Management Controller (BMC) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 American Megatrends, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Eclypsium \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 American Megatrends, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 MegaRAC BMC, \u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nCVE-2022-40259 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 9,9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 API Redfish \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\nCVE-2022-40242 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 8,3) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f sysadmin, \u0430 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443. \n\nCVE-2022-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 7,5) \u2013 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c. \n\nMegaRAC BMC \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0435. \u041f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 MegaRAC BMC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 15 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMD, Ampere Computing, ASRock, Asus, ARM, Dell EMC, Gigabyte, Hewlett-Packard Enterprise, Huawei, Inspur, Lenovo, Nvidia, Qualcomm, Quanta \u0438 Tyan.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #MegaRAC", "creation_timestamp": "2026-07-29T00:00:48.554466Z"}, {"uuid": "ae84b13f-68d9-4691-a7f3-2e84679dca5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/EchelonEyes/1173", "content": "Check Point: \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c\u0430\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 109-\u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u00ab\u041e\u0442\u0447\u0435\u0442 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 2023 \u0433\u043e\u0434: \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c \u0432 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u00ab\u0440\u0430\u0437\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f\u00bb (\u00ab2023 SECURITY REPORT: CYBERATTACKS REACH AN ALL-TIME HIGH IN RESPONSE TO GEO-POLITICAL CONFLICT, AND THE RISE OF \u2018DISRUPTION AND DESTRUCTION\u2019 MALWARE\u00bb). \u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0442\u0447\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 PDF-\u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u0438 \u0432 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0439\u043d\u043e\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0439 \u0433\u043e\u0434 \u043a\u0430\u043a \u0441\u0430\u043c\u044b\u0439 \u0445\u0430\u043e\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0439:\n\n- \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0430\u0441\u0441\u043e\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0441\u043b\u0430\u0432\u044f\u043d\u0441\u043a\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432 7 \u0440\u0430\u0437. \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c, \u043d\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 74% \u0432 \u0433\u043e\u0434\u043e\u0432\u043e\u043c \u0438\u0441\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0438.\n\n- \u0413\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u043e\u043c \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u044b\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043b\u0438\u0448\u044c \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u043e\u043f\u0430\u0441\u0430\u044f\u0441\u044c \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u0412 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043b\u0443\u0447\u0448\u0435 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435, \u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0436\u0434\u0435.\n\n- \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u2013 \u043d\u0430 48% \u0432 2022 \u0433\u043e\u0434\u0443, \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 2021 \u0433\u043e\u0434\u043e\u043c. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0443\u0441\u043b\u0443\u0433\u0430\u043c, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u043e\u0431\u043b\u0430\u043a\u043e \u043b\u0430\u043a\u043e\u043c\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n- \u0414\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n- \u0423\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u044b\u0432 \u0432 \u043d\u0430\u0432\u044b\u043a\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430 Check Point \u0432 \u0445\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0418\u0411, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u0432 \u043c\u0438\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c (\u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a ProxyShell, Fortinet CVE-2022-40684 \u0438 CVE-2022-42475, Spring4Shell, Follina, CVE-2022-26138 \u0432 Atlassian Confluence \u0438 \u0434\u0440.). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Checkpoint \u0434\u0430\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 2022 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://research.checkpoint.com/2023/2023-security-report-cyberattacks-reach-an-all-time-high-in-response-to-geo-political-conflict-and-the-rise-of-disruption-and-destruction-malware/\n\n#\u043e\u0442\u0447\u0435\u0442 #CheckPoint", "creation_timestamp": "2026-07-29T00:00:52.385608Z"}, {"uuid": "4e2d6945-a562-4532-8f23-da52c2b0dd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-29T00:00:53.206095Z"}, {"uuid": "177cca8e-2568-41b7-9334-7e5ba47fa7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/divannyi_it/1144", "content": "\ud83d\udea8 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate\n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0433\u0440\u043e\u043c\u043a\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u0435\u0431\u0435 \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438\u043b\u0438 \u043a\u0430\u043d\u0430\u043b\u0430. Fortigate \u0435\u0449\u0435 \u0442\u043e\u0433\u0434\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS 7.2.2. \u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b.\n\nBelsen Group, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u0431\u044b\u0442\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0435\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0412 \u0441\u043b\u0438\u0442\u044b\u0445 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 (\u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430), \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u043b\u0438 \u0432\u0430\u0441 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Fortigate #\u0443\u0442\u0435\u0447\u043a\u0438", "creation_timestamp": "2026-07-29T09:00:07.661091Z"}, {"uuid": "f52ea95f-eff0-4ae8-9d69-563625abb6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:05.698055Z"}, {"uuid": "aa577c70-6ef9-4793-a6da-01eaab20cf92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:15:34.893865Z"}, {"uuid": "76a24bd6-5efd-47a8-8d0d-f92ca9a3377c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/18290", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-40127-Airflow-RCE*\nGithub: https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE", "creation_timestamp": "2026-07-29T12:00:10.069715Z"}, {"uuid": "159dd7cd-9d56-47d9-9e9b-62ff00194ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-29T12:00:14.130517Z"}, {"uuid": "3e227a13-0812-4c9c-9d8e-75352e98b5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/CVEhub/12880", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4096*\nGithub: https://github.com/aminetitrofine/CVE-2022-4096", "creation_timestamp": "2026-07-29T12:00:31.241080Z"}, {"uuid": "350f63ee-2f99-49eb-89b0-55f5ed9eca76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://t.me/CVEhub/11388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40799*\nGithub: https://github.com/rtfmkiesel/CVE-2022-40799", "creation_timestamp": "2026-07-29T12:00:37.330658Z"}, {"uuid": "20df267a-a502-4994-996e-21bafec4fac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "seen", "source": "https://t.me/CVEhub/6175", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40881*\nGithub: https://github.com/yilin1203/CVE-2022-40881", "creation_timestamp": "2026-07-29T12:00:52.556913Z"}, {"uuid": "6589ab44-2759-4406-aa9b-28adcf1a2949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/CVEhub/4716", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40140\nGithub: https://github.com/ipsBruno/CVE-2022-40140-SCANNER\nDescribe: \nAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.", "creation_timestamp": "2026-07-29T12:00:56.014540Z"}, {"uuid": "082cd1f2-f1c4-4c82-ad71-70a03c73141d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/CVEhub/6509", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40684*\nGithub: https://github.com/z-bool/CVE-2022-40684", "creation_timestamp": "2026-07-29T12:00:52.341445Z"}, {"uuid": "a2d26b2e-facb-4e2d-84cc-63a0db1f37b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "seen", "source": "https://t.me/CVEhub/3582", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40664\nGithub: https://github.com/Jackey0/CVE-2022-40664\nDescribe: \nApache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.", "creation_timestamp": "2026-07-29T12:00:58.301629Z"}, {"uuid": "98119c7a-bf73-43a3-8de2-5ccf87b7554d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/CVEhub/3499", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40648\nGithub: https://github.com/b3wT/CVE-2022-40648-MASS\nDescribe: \nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.", "creation_timestamp": "2026-07-29T12:00:58.361587Z"}, {"uuid": "4dfbeb07-738f-47f4-b64b-4799b4d46ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://t.me/CVEhub/3717", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40674\nGithub: https://github.com/nidhi7598/-expat_2.1.0_CVE-2022-40674\nDescribe: \nlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.", "creation_timestamp": "2026-07-29T12:00:57.999469Z"}, {"uuid": "f9f60c92-8a04-4363-b077-f83e2a7786e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-29T12:00:54.323108Z"}, {"uuid": "5531ecf9-8e98-4aab-a85e-b52a6693f50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40687", "type": "seen", "source": "https://t.me/CVEhub/4105", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40687\nGithub: https://github.com/williamkhepri/CVE-2022-40687-metasploit-scanner\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:57.323357Z"}, {"uuid": "7a037947-68c5-45ee-bec1-ea7b78df6038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40317", "type": "seen", "source": "https://t.me/CVEhub/2402", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40317\nGithub: https://github.com/izdiwho/CVE-2022-40317\nDescribe: \nOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.", "creation_timestamp": "2026-07-29T12:01:01.156488Z"}, {"uuid": "e6bb9efc-3d1b-4d6d-8883-1b55a7abb29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/CVEhub/4275", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40146\nGithub: https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar\nDescribe: \nServer-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.", "creation_timestamp": "2026-07-29T12:00:56.924835Z"}, {"uuid": "3519e082-99ff-4909-ac34-f4e6aed775a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40470", "type": "seen", "source": "https://t.me/CVEhub/4284", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40470\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40470\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:56.952714Z"}, {"uuid": "5ddea12a-1747-4f64-a4c6-1f3c9fe50e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "seen", "source": "https://t.me/CVEhub/2880", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40490\nGithub: https://github.com/whitej3rry/CVE-2022-40490\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:01:00.148051Z"}, {"uuid": "61dc5ad7-e912-45f5-b3fe-bf1e940c9d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40126", "type": "seen", "source": "https://t.me/CVEhub/2917", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40126\nGithub: https://github.com/LovelyWei/CVE-2022-40126\nDescribe: \nA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.", "creation_timestamp": "2026-07-29T12:01:00.178493Z"}, {"uuid": "75c3acf2-879d-4ccb-b8c4-d34dc2f29b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "seen", "source": "https://t.me/CVEhub/2878", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40916\nGithub: https://github.com/whitej3rry/CVE-2022-40916\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:01:00.310693Z"}, {"uuid": "08cb1f99-dc20-4573-a86e-6f47d2e1a1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://t.me/CVEhub/3434", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40471\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40471\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:58.558848Z"}, {"uuid": "87621bee-6473-4223-b200-1fee5769a9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/CVEhub/3292", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40684\nGithub: https://github.com/dickson0day/CVE-2022-40684\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:58.687081Z"}, {"uuid": "fa513d89-50d1-4867-9ff8-22a6b534e43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/reverseame/3465", "content": "Fortinet Series 1 \u2014 Analysis of CVE-2022\u201340684 https://medium.com/@INTfinity/fortinet-series-1-analysis-of-cve-2022-40684-88870994e6e0", "creation_timestamp": "2026-07-29T12:02:28.731754Z"}, {"uuid": "d7ccf67d-e017-45c6-a720-9053d0b71d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/reverseame/3466", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-07-29T12:02:28.787992Z"}, {"uuid": "011ff56d-ab44-4ed9-86b9-aa810c7d83c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/reverseame/2880", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096) https://infosecwriteups.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2", "creation_timestamp": "2026-07-29T12:02:37.428798Z"}, {"uuid": "f37005d8-031f-4dae-b48b-d5a930609564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "seen", "source": "https://t.me/reverseame/2841", "content": "[CVE-2022-40303] Integer overflow in xmlParseNameComplex https://gitlab.gnome.org/GNOME/libxml2/-/issues/381", "creation_timestamp": "2026-07-29T12:02:37.691636Z"}, {"uuid": "f913e8e2-e5b3-4355-915e-14b3b5f649d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/thehaking/2161", "content": "Downfall - \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432\n\n\u0414\u0430\u043d\u0438\u044d\u043b\u044c \u041c\u043e\u0433\u0438\u043c\u0438 (Daniel Moghimi) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u043c \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e, \u0432\u044b\u044f\u0432\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-40982) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432 XMM, YMM \u0438 ZMM, \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 AVX (Advanced Vector Extensions) \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u044f\u0434\u0440\u0435 CPU. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u0438\u043c\u044f Downfall, \u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0430 Gather Data Sampling (GDS).\n.\n.\n\ud83d\udc49 @sysadminoff\nhttps://www.opennet.ru/opennews/art.shtml?num=59571", "creation_timestamp": "2026-08-27T09:00:04.830981Z"}, {"uuid": "463d0fe1-aa40-4247-88d1-7a9ecdc87d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/xhqcankao/5802", "content": "\u8c37\u6b4c\u63ed\u793aAMD/Intel\u5904\u7406\u5668\u5b89\u5168\u6f0f\u6d1e\uff1a\u201cDownfall\u201d(Intel)\u548c\u201cZenbleed\u201d(AMD)\n\n\u6628\u5929\uff0c\u8c37\u6b4c\u53d1\u5e03\u4e86\u4e00\u7bc7\u6587\u7ae0\uff0c\u63cf\u8ff0\u4e86\u7b2c6\u81f311\u4ee3\u82f1\u7279\u5c14CPU(\u547d\u540d\u4e3aDownfall\uff0cCVE-2022-40982)\u548cAMD Zen2(\u547d\u540d\u4e3aZenbleed\uff0cCVE-2023-20593)\u4e2d\u7684\u6f0f\u6d1e\u3002\u5728\u56e2\u961f\u53d1\u73b0\u8fd9\u4e9b\u6f0f\u6d1e\u540e\uff0c\u5df2\u53ca\u65f6\u901a\u77e5\u4e86\u6240\u6709\u53d7\u5f71\u54cd\u7684\u516c\u53f8\u3002\n\n\u82f1\u7279\u5c14\u5728\u201cintel-sa-00828\u201d\u7684\u5e16\u5b50\u4e2d\u5217\u51fa\u4e86\u6b64\u6f0f\u6d1e\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u4f60\u8fd8\u53ef\u4ee5\u5728\u6b64\u5904\u51c6\u786e\u4e86\u89e3\u54ea\u4e9b Intel CPU \u53d7\u5230\u5f71\u54cd\u3002\n\nAMD\u5728\u516c\u544a\u201cAMD-SB-7008\u201d\u4e2d\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u6b64\u6f0f\u6d1e\u3002\n\n\u2014\u2014 deskmodder.de", "creation_timestamp": "2026-08-24T12:00:05.368980Z"}, {"uuid": "6c80d93b-f7b2-435d-81c6-e015a0fd5dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/sysadm_in_up/1380", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nPoC\n\nhttps://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-07-29T12:03:21.261757Z"}, {"uuid": "989003cc-f406-4dea-b63b-147b2e2c7a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cisoclub/1965", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f WithSecure, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0444\u0435\u0440\u0435 \ud83d\udd10\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcddMicrosoft Office.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83d\udd16\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration Suite (ZCS) \u0443\u0436\u0435 \ud83d\udd11\u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 1000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\n3\ufe0f\u20e3 \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-40684, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \ud83d\udd12\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b FortiGate, \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \ud83d\udccaFortiSwitch Manager. \n\n4\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435\u2755 80 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 vCenter Server \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.0 \u0432\u0441\u0451 \u0435\u0449\u0451 \ud83e\udd37\ud83c\udffc\u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \ud83d\udcc8\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbZoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 macOS \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \ud83d\uddd2\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2022-28762 \u0432 \u041f\u041e.\n\n7\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \ud83c\udf0eChrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u0438 Aruba Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.", "creation_timestamp": "2026-07-29T12:03:11.672492Z"}, {"uuid": "fc2fa283-22b1-48dc-8928-35197a528d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18290", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-40127-Airflow-RCE*\nGithub: https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE", "creation_timestamp": "2026-07-30T00:00:22.286736Z"}, {"uuid": "4eb10800-19c1-4892-95fa-8857da9b0192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-30T00:00:32.480663Z"}, {"uuid": "2bf7a7e3-5bef-40b1-97eb-64a288d2afff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/CVEhub/12880", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4096*\nGithub: https://github.com/aminetitrofine/CVE-2022-4096", "creation_timestamp": "2026-07-30T00:00:56.578935Z"}, {"uuid": "7a21d368-8296-4303-927f-238fb3ce29e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40799", "type": "seen", "source": "https://t.me/CVEhub/11388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40799*\nGithub: https://github.com/rtfmkiesel/CVE-2022-40799", "creation_timestamp": "2026-07-30T00:01:02.924625Z"}, {"uuid": "44a57b3d-56d0-4113-a63c-1321256f416b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40881", "type": "seen", "source": "https://t.me/CVEhub/6175", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40881*\nGithub: https://github.com/yilin1203/CVE-2022-40881", "creation_timestamp": "2026-07-30T00:01:29.866791Z"}, {"uuid": "0ebd68fe-bf44-4b4e-acf9-4538f930a0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/CVEhub/3292", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40684\nGithub: https://github.com/dickson0day/CVE-2022-40684\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:37.722314Z"}, {"uuid": "25a9cb7c-9291-48b0-a286-eb63342789e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/CVEhub/6509", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-40684*\nGithub: https://github.com/z-bool/CVE-2022-40684", "creation_timestamp": "2026-07-30T00:01:29.562596Z"}, {"uuid": "8209dd74-14e2-48ee-a07b-8cafdaf15ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40470", "type": "seen", "source": "https://t.me/CVEhub/4284", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40470\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40470\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:34.920412Z"}, {"uuid": "8a8384f2-4b53-4c39-9ae8-f65566086510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40664", "type": "seen", "source": "https://t.me/CVEhub/3582", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40664\nGithub: https://github.com/Jackey0/CVE-2022-40664\nDescribe: \nApache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.", "creation_timestamp": "2026-07-30T00:01:37.097512Z"}, {"uuid": "db6fe75e-6522-4a6f-8dbf-7e9a11e4df71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/CVEhub/3499", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40648\nGithub: https://github.com/b3wT/CVE-2022-40648-MASS\nDescribe: \nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.", "creation_timestamp": "2026-07-30T00:01:37.192426Z"}, {"uuid": "20f9cdb4-02ac-4e9e-81cb-7be0966d6236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-30T00:01:32.513062Z"}, {"uuid": "9861e928-7ef3-4c93-b5f4-3b65f318b108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "https://t.me/CVEhub/4716", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40140\nGithub: https://github.com/ipsBruno/CVE-2022-40140-SCANNER\nDescribe: \nAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.", "creation_timestamp": "2026-07-30T00:01:32.928896Z"}, {"uuid": "251f7b41-0c99-4ba4-ac48-b66a99f8bd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/CVEhub/4275", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40146\nGithub: https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar\nDescribe: \nServer-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.", "creation_timestamp": "2026-07-30T00:01:34.881479Z"}, {"uuid": "624303b5-59ec-4ad9-9898-2e81015a054c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40687", "type": "seen", "source": "https://t.me/CVEhub/4105", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40687\nGithub: https://github.com/williamkhepri/CVE-2022-40687-metasploit-scanner\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:35.583661Z"}, {"uuid": "3ad0c0c5-488f-4cb6-9fe1-2ac250dd3dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40674", "type": "seen", "source": "https://t.me/CVEhub/3717", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40674\nGithub: https://github.com/nidhi7598/-expat_2.1.0_CVE-2022-40674\nDescribe: \nlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.", "creation_timestamp": "2026-07-30T00:01:36.687759Z"}, {"uuid": "3b85e007-3a7a-4b0c-b382-81022b5e9bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://t.me/CVEhub/3434", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40471\nGithub: https://github.com/RashidKhanPathan/CVE-2022-40471\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:37.539479Z"}, {"uuid": "3a52ca69-a020-4284-b940-39b70cd16417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40490", "type": "seen", "source": "https://t.me/CVEhub/2880", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40490\nGithub: https://github.com/whitej3rry/CVE-2022-40490\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:38.447724Z"}, {"uuid": "4b792377-173b-45f3-9bd3-f1b22e86e8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40126", "type": "seen", "source": "https://t.me/CVEhub/2917", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40126\nGithub: https://github.com/LovelyWei/CVE-2022-40126\nDescribe: \nA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.", "creation_timestamp": "2026-07-30T00:01:38.487696Z"}, {"uuid": "09796752-707e-45cf-8c22-3aab4f3c6a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40916", "type": "seen", "source": "https://t.me/CVEhub/2878", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40916\nGithub: https://github.com/whitej3rry/CVE-2022-40916\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:38.664815Z"}, {"uuid": "8830e71e-0dd8-46fd-ad60-16ba33f26a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40317", "type": "seen", "source": "https://t.me/CVEhub/2402", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40317\nGithub: https://github.com/izdiwho/CVE-2022-40317\nDescribe: \nOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.", "creation_timestamp": "2026-07-30T00:01:40.444240Z"}, {"uuid": "c1f9ba5d-da11-4e8e-ab2d-238788a0d1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "https://t.me/divannyi_it/1144", "content": "\ud83d\udea8 Belsen Group \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Fortigate\n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0433\u0440\u043e\u043c\u043a\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u0435\u0431\u0435 \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-40684, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438\u043b\u0438 \u043a\u0430\u043d\u0430\u043b\u0430. Fortigate \u0435\u0449\u0435 \u0442\u043e\u0433\u0434\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 FortiOS 7.2.2. \u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b.\n\nBelsen Group, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u0431\u044b\u0442\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0435\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0412 \u0441\u043b\u0438\u0442\u044b\u0445 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 (\u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430), \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u043b\u0438 \u0432\u0430\u0441 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Fortigate #\u0443\u0442\u0435\u0447\u043a\u0438", "creation_timestamp": "2026-07-30T00:02:06.706017Z"}, {"uuid": "d8fc5e3b-0181-4a2e-92f7-1f1ce882bfeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/reverseame/3466", "content": "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/", "creation_timestamp": "2026-07-30T00:02:29.638085Z"}, {"uuid": "987bf0b6-2311-4ab1-8211-bbfbe05dfee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/reverseame/3465", "content": "Fortinet Series 1 \u2014 Analysis of CVE-2022\u201340684 https://medium.com/@INTfinity/fortinet-series-1-analysis-of-cve-2022-40684-88870994e6e0", "creation_timestamp": "2026-07-30T00:02:29.590785Z"}, {"uuid": "0189085d-cd7c-480b-a258-ec1dd903c46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40303", "type": "seen", "source": "https://t.me/reverseame/2841", "content": "[CVE-2022-40303] Integer overflow in xmlParseNameComplex https://gitlab.gnome.org/GNOME/libxml2/-/issues/381", "creation_timestamp": "2026-07-30T00:02:34.062142Z"}, {"uuid": "d540cfd4-174a-45a5-b9c1-5a55aea7bf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/Hackme_news/885", "content": "\u00abReptar\u00bb \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f Google\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Reptar (CVE-2023-23583), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0437\u0430 \u043d\u0435\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0442  Downfall (CVE-2022-40982) \u0438 Zenbleed (CVE-2023-20593) , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Intel. \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. https://www.cyberkendra.com/2023/11/reptar-new-cpu-vulnerability-discovered.html", "creation_timestamp": "2026-09-01T17:00:06.906439Z"}, {"uuid": "f3583c4c-943b-4dbf-81b1-627c6bcb0fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40516", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-01T17:00:10.312393Z"}, {"uuid": "10e6bcb2-7e53-4c8e-9c69-faff96dc851f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40520", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-01T17:00:10.347262Z"}, {"uuid": "85bca464-845f-41e9-bb87-6b05348d842c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/Hackme_news/676", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n\nAcer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-4020 , \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Aspire A315-22, A115-21 \u0438 A315-22G, \u0430 \u0442\u0430\u043a\u0436\u0435 Extensa EX215-21 \u0438 EX215-21G.\n\nhttps://shly.link/iAF5T", "creation_timestamp": "2026-09-01T17:00:10.444332Z"}, {"uuid": "f43a34cc-c119-4851-b483-ffc244042853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-01T17:00:25.061718Z"}, {"uuid": "bad56acf-ea87-4185-a5dd-ffdb025a40c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-01T17:00:22.202400Z"}, {"uuid": "c3421dcc-ac90-4e21-9db0-9abf112dfb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-01T17:00:25.724258Z"}, {"uuid": "4205e879-a23f-4051-8909-b6fe6da17545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-01T17:00:25.912227Z"}, {"uuid": "80793ab1-ffa3-41e9-a1bd-927755bc9f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:52.904042Z"}, {"uuid": "ec2d3b2b-f54e-4bd5-9528-0061d9416ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:52.620361Z"}, {"uuid": "2ba49a9e-cb91-4ebc-a82e-7d975fef0327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "seen", "source": "https://t.me/hacking_Attack/77056", "content": "How I found CVE-2022\u201340088\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:17.287234Z"}, {"uuid": "2725ec1a-7788-4231-8019-9bf26f6dfb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:52.676070Z"}, {"uuid": "c2068147-0bd2-4392-9888-d92ee635fd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:52.947919Z"}, {"uuid": "d0932a9d-ede7-4e13-862e-808ef343a0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.106640Z"}, {"uuid": "e39995cd-347a-42c3-8026-e685bd14cb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "seen", "source": "https://t.me/hacking_Attack/77058", "content": "Hey Squad,Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:18.619977Z"}, {"uuid": "e5a85129-da7a-4e89-854e-2b3fc7780c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/hacking_Attack/77419", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096)\nhttps://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:17.139667Z"}, {"uuid": "103c3e35-2830-4108-8018-998e8c6e830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.349837Z"}, {"uuid": "9a7e0ccd-a5ba-485c-925f-02ef5b9f3af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/hacking_Attack/77421", "content": "Hello everyone myself Basavaraj\u00a0, Today in this writeup I will explain about my 2nd CVE i.e CVE-2022\u20134096Continue reading on Medium \u00bb (https://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:17.185890Z"}, {"uuid": "cdcedfba-3e59-4f61-aae0-8a6c579aaaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/hacking_Attack/78263", "content": "Fortigate CVE-2022-40684\nhttps://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/\n\nHey gang! Looking for some assistance exploiting this CVE. Ironically enough it's not for a pentest, but for a new managed client who does not know their fortinet password. We're trying to avoid doing a factory reset if possible especially since they are a little further out (though it wouldn't be the end of the world if that's what it comes down to). I followed the POC by Horizon3ai and successfully uploaded a pub key, but I'm still getting prompted for a password when I attempt to SSH into the firewall. Has anyone else experienced this or knows of another way we can leverage the CVE to get in? I don't believe it's limited to just uploading a pubkey for ssh. Thanks in advance!    submitted by    /u/Sir_Scrubs_Alot  (https://www.reddit.com/user/Sir_Scrubs_Alot) \n [link] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)   [comments] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:15.353323Z"}, {"uuid": "e770aed0-1f07-4530-816a-b6f7e8c31b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/hacking_Attack/72913", "content": "hacking: security in practice\nFortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nhttps://external-preview.redd.it/pOrwqOKKFnGcTN305sQA5fbJ1gdxEvgsV9O_mKTYNw4.jpg?width=640&crop=smart&auto=webp&s=30a2c94b0e21f8454ed3e3f3ad8414b5d7508e9d submitted by /u/CyberMasterV \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.486228Z"}, {"uuid": "2230bd73-cae4-4c04-ac29-2798b73b85b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "seen", "source": "https://t.me/hacking_Attack/71970", "content": "Simple College Website 1.0 was found to be vulnerable to an unauthenticated arbitrary file upload leading to remote code execution.Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.708749Z"}, {"uuid": "576bdc09-d525-4ad6-8bbb-95ab2fa02a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "seen", "source": "https://t.me/hacking_Attack/71968", "content": "How I found `CVE-2022\u201340087`\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.966485Z"}, {"uuid": "a8191a74-0810-4c38-89e5-5d99dda5479c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.158879Z"}, {"uuid": "63d54cfc-f535-4b8d-a54e-b99e579968bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.202972Z"}, {"uuid": "d86b304f-7ae3-4e49-882d-e22710fd1be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:12.369425Z"}, {"uuid": "86e49d3c-7a38-4a6b-9870-5b4619fd4283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:12.418821Z"}, {"uuid": "c91b7df5-1205-4c88-8f8b-94e461dd9fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:12.663985Z"}, {"uuid": "5bb3b149-85bb-423b-93d3-0728fc9c393f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:12.709899Z"}, {"uuid": "3aeb8367-7586-40e3-a8e3-cd3ba64e9521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/hacking_Attack/77419", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096)\nhttps://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:33.529172Z"}, {"uuid": "e91ebad1-ab1f-45ac-8584-5833f642609c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/hacking_Attack/78263", "content": "Fortigate CVE-2022-40684\nhttps://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/\n\nHey gang! Looking for some assistance exploiting this CVE. Ironically enough it's not for a pentest, but for a new managed client who does not know their fortinet password. We're trying to avoid doing a factory reset if possible especially since they are a little further out (though it wouldn't be the end of the world if that's what it comes down to). I followed the POC by Horizon3ai and successfully uploaded a pub key, but I'm still getting prompted for a password when I attempt to SSH into the firewall. Has anyone else experienced this or knows of another way we can leverage the CVE to get in? I don't believe it's limited to just uploading a pubkey for ssh. Thanks in advance!    submitted by    /u/Sir_Scrubs_Alot  (https://www.reddit.com/user/Sir_Scrubs_Alot) \n [link] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)   [comments] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:32.718112Z"}, {"uuid": "64dc6607-9650-4407-9061-d295a6505a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "seen", "source": "https://t.me/hacking_Attack/77421", "content": "Hello everyone myself Basavaraj\u00a0, Today in this writeup I will explain about my 2nd CVE i.e CVE-2022\u20134096Continue reading on Medium \u00bb (https://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:33.575055Z"}, {"uuid": "64a6dfea-6f1d-4ee2-bdb4-8bbb0dce0681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "seen", "source": "https://t.me/hacking_Attack/77056", "content": "How I found CVE-2022\u201340088\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:33.659187Z"}, {"uuid": "1cec9b68-4333-4533-8189-085716c05736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "seen", "source": "https://t.me/hacking_Attack/77058", "content": "Hey Squad,Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:33.706146Z"}, {"uuid": "6823fcd3-e3fa-4714-8786-4ee5dbbb2e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "seen", "source": "https://t.me/hacking_Attack/71970", "content": "Simple College Website 1.0 was found to be vulnerable to an unauthenticated arbitrary file upload leading to remote code execution.Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:35.558972Z"}, {"uuid": "4ca4ac81-15fd-4aa5-bf4e-e49771181194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/hacking_Attack/72913", "content": "hacking: security in practice\nFortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nhttps://external-preview.redd.it/pOrwqOKKFnGcTN305sQA5fbJ1gdxEvgsV9O_mKTYNw4.jpg?width=640&crop=smart&auto=webp&s=30a2c94b0e21f8454ed3e3f3ad8414b5d7508e9d submitted by /u/CyberMasterV \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:35.335529Z"}, {"uuid": "2a8f523c-88d0-4204-86b7-78864bebf8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "seen", "source": "https://t.me/hacking_Attack/71968", "content": "How I found `CVE-2022\u201340087`\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.467784Z"}, {"uuid": "8cd58261-e273-4661-8083-5e63b23ca4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.503667Z"}, {"uuid": "b7c614cb-e046-485a-ad61-c3569c833265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.541030Z"}, {"uuid": "999ba3c4-a746-4bc6-b2e1-1e515f0bb08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.593624Z"}, {"uuid": "9c53ec26-8c44-4cbb-8d05-d6dc56966a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.702988Z"}, {"uuid": "1836da7d-8827-41e4-b16d-b594860e4b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/Hackme_news/885", "content": "\u00abReptar\u00bb \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f Google\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Reptar (CVE-2023-23583), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0437\u0430 \u043d\u0435\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0442  Downfall (CVE-2022-40982) \u0438 Zenbleed (CVE-2023-20593) , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Intel. \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. https://www.cyberkendra.com/2023/11/reptar-new-cpu-vulnerability-discovered.html", "creation_timestamp": "2026-09-02T01:03:34.928370Z"}, {"uuid": "3dd70313-2e4a-4bd2-9f05-6d4044a20204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40516", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-02T01:03:37.619491Z"}, {"uuid": "13b698cb-585b-40f0-9276-31ae9399e453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40520", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-02T01:03:37.660207Z"}, {"uuid": "5e8e58be-882f-4039-a8c8-b3f3d3d42bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/Hackme_news/676", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n\nAcer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-4020 , \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Aspire A315-22, A115-21 \u0438 A315-22G, \u0430 \u0442\u0430\u043a\u0436\u0435 Extensa EX215-21 \u0438 EX215-21G.\n\nhttps://shly.link/iAF5T", "creation_timestamp": "2026-09-02T01:03:38.600875Z"}, {"uuid": "4f52489f-93be-41fe-b650-ad702ddebdd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "seen", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-02T01:04:07.154819Z"}, {"uuid": "975f5b6b-08ad-460e-9136-9075f6375833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-02T01:04:03.048744Z"}, {"uuid": "ce06f321-b882-4b04-9a3e-b3859dda7134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-02T01:04:07.881572Z"}, {"uuid": "74390ac4-21ff-4999-8aff-85d7d84e746c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-02T01:04:08.236396Z"}, {"uuid": "9a995d33-3e4d-4499-9c59-3151e6e417e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:07.843657Z"}, {"uuid": "158dd3f4-b07d-4908-b97a-4efa853d6f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:00:03.570448Z"}, {"uuid": "4762f557-0747-4c2b-b864-c3cf226b53fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:15:06.390545Z"}, {"uuid": "25d36265-6753-43cc-8ac6-9335c338b0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T09:00:04.614627Z"}, {"uuid": "84e743b6-ef11-4455-8164-9d54c704c796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T09:00:04.669268Z"}, {"uuid": "cc123c1c-64f3-409b-97ea-61276a4b3add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T10:00:05.723740Z"}, {"uuid": "0ae389a1-2685-4028-9c85-78a95f11a259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T10:00:05.767985Z"}, {"uuid": "b9bdd082-f0aa-4701-bac4-025691538216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:11.946805Z"}, {"uuid": "0b45a7ab-a14c-4c6d-b0ec-52af407bbaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T01:00:33.348196Z"}, {"uuid": "e9027ce8-b4f4-442d-8db9-d73277072eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T01:00:33.400452Z"}, {"uuid": "26dade4b-f4e7-4a20-b341-8031aa8ca9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T01:00:33.862024Z"}, {"uuid": "efd7667e-feba-4673-b9c9-83500bb1f700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T01:00:33.916673Z"}, {"uuid": "a0e905be-fba4-4d68-bd7f-c12527cc71ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77421", "content": "Hello everyone myself Basavaraj\u00a0, Today in this writeup I will explain about my 2nd CVE i.e CVE-2022\u20134096Continue reading on Medium \u00bb (https://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T04:00:03.665936Z"}, {"uuid": "729fb99b-884e-47b5-8549-86ecbca5786b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77419", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096)\nhttps://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T04:00:03.715047Z"}, {"uuid": "f22ec224-f227-4294-8829-3ce72587ba51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/78263", "content": "Fortigate CVE-2022-40684\nhttps://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/\n\nHey gang! Looking for some assistance exploiting this CVE. Ironically enough it's not for a pentest, but for a new managed client who does not know their fortinet password. We're trying to avoid doing a factory reset if possible especially since they are a little further out (though it wouldn't be the end of the world if that's what it comes down to). I followed the POC by Horizon3ai and successfully uploaded a pub key, but I'm still getting prompted for a password when I attempt to SSH into the firewall. Has anyone else experienced this or knows of another way we can leverage the CVE to get in? I don't believe it's limited to just uploading a pubkey for ssh. Thanks in advance!    submitted by    /u/Sir_Scrubs_Alot  (https://www.reddit.com/user/Sir_Scrubs_Alot) \n [link] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)   [comments] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T04:00:04.495929Z"}, {"uuid": "5b512eae-1388-4381-a755-382c59b4de26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77058", "content": "Hey Squad,Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T05:00:04.986064Z"}, {"uuid": "7a2c0d9c-dbe3-44ae-a9b3-a9325885d962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77056", "content": "How I found CVE-2022\u201340088\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T05:00:05.037429Z"}, {"uuid": "a7f4322d-a281-4c13-b92d-c07477b56918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71968", "content": "How I found `CVE-2022\u201340087`\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T06:00:05.261224Z"}, {"uuid": "507864fd-37cf-48f2-92f2-3e9f4f55e16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71970", "content": "Simple College Website 1.0 was found to be vulnerable to an unauthenticated arbitrary file upload leading to remote code execution.Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T06:00:05.491626Z"}, {"uuid": "332a99ce-48e8-4166-9cf3-b5d9f633f80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/72913", "content": "hacking: security in practice\nFortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nhttps://external-preview.redd.it/pOrwqOKKFnGcTN305sQA5fbJ1gdxEvgsV9O_mKTYNw4.jpg?width=640&crop=smart&auto=webp&s=30a2c94b0e21f8454ed3e3f3ad8414b5d7508e9d submitted by /u/CyberMasterV \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T06:00:05.727052Z"}, {"uuid": "d5da5edc-23c4-4c95-85bd-605a8f84c1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.259610Z"}, {"uuid": "494e3eda-b8a2-4bc7-8f14-3fce46cedf43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.302500Z"}, {"uuid": "b16756ef-5d10-412c-b518-ac9bae17ffe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.347925Z"}, {"uuid": "7b716427-d598-4099-8b4f-44f91f0e997f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.389547Z"}, {"uuid": "2f1a1235-5d9a-4830-ac83-699a94983709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40134", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:52.275662Z"}, {"uuid": "28a25aa8-3980-4461-a7b7-353be0db833b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40137", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:52.325651Z"}, {"uuid": "e9720ebd-7d1a-4d79-8adb-3f20d642f496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:51.525522Z"}, {"uuid": "6a8ac1cb-831a-434b-9880-0070f84f1d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40135", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:51.571994Z"}, {"uuid": "f9b03e88-2436-4ee1-af37-4d24806bd6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71968", "content": "How I found `CVE-2022\u201340087`\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:55.528132Z"}, {"uuid": "dcb5a5ac-9463-4545-aa86-01b66797b649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40087", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71970", "content": "Simple College Website 1.0 was found to be vulnerable to an unauthenticated arbitrary file upload leading to remote code execution.Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40087-e20318c0f7dc?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:55.730467Z"}, {"uuid": "227fc367-432e-4e37-8b7e-34b715e979ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/72913", "content": "hacking: security in practice\nFortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)\n\nhttps://external-preview.redd.it/pOrwqOKKFnGcTN305sQA5fbJ1gdxEvgsV9O_mKTYNw4.jpg?width=640&crop=smart&auto=webp&s=30a2c94b0e21f8454ed3e3f3ad8414b5d7508e9d submitted by /u/CyberMasterV \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:55.926983Z"}, {"uuid": "8190585f-4807-4cd5-b231-69eed8c3b8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77058", "content": "Hey Squad,Continue reading on Medium \u00bb (https://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:58.076704Z"}, {"uuid": "c86d38fa-e774-4961-9b5a-b595e1d4f6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77056", "content": "How I found CVE-2022\u201340088\nhttps://gowthamaraj-rajendran.medium.com/how-i-found-cve-2022-40088-6e1ada4d37?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:58.121104Z"}, {"uuid": "bee1359c-b322-4b8a-a9f2-360d180d82eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77421", "content": "Hello everyone myself Basavaraj\u00a0, Today in this writeup I will explain about my 2nd CVE i.e CVE-2022\u20134096Continue reading on Medium \u00bb (https://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:58.207180Z"}, {"uuid": "af3575e6-e402-4309-afc0-3f4fa27ad793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4096", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/77419", "content": "SSRF via DNS Rebinding (CVE-2022\u20134096)\nhttps://basu-banakar.medium.com/ssrf-via-dns-rebinding-cve-2022-4096-b7bf75928bb2?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:58.249839Z"}, {"uuid": "c170360e-5931-45e8-b063-aa406c81b2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/78263", "content": "Fortigate CVE-2022-40684\nhttps://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/\n\nHey gang! Looking for some assistance exploiting this CVE. Ironically enough it's not for a pentest, but for a new managed client who does not know their fortinet password. We're trying to avoid doing a factory reset if possible especially since they are a little further out (though it wouldn't be the end of the world if that's what it comes down to). I followed the POC by Horizon3ai and successfully uploaded a pub key, but I'm still getting prompted for a password when I attempt to SSH into the firewall. Has anyone else experienced this or knows of another way we can leverage the CVE to get in? I don't believe it's limited to just uploading a pubkey for ssh. Thanks in advance!    submitted by    /u/Sir_Scrubs_Alot  (https://www.reddit.com/user/Sir_Scrubs_Alot) \n [link] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)   [comments] (https://www.reddit.com/r/Pentesting/comments/z7zpsn/fortigate_cve202240684/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:59.212574Z"}, {"uuid": "34b09771-6e6d-4f33-857f-407505342113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "seen", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-06T08:00:05.345161Z"}, {"uuid": "82bc7cf5-2e92-4a5c-bb65-1bdf147a03aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:00:03.145910Z"}, {"uuid": "85930f1e-286e-4c45-8ed1-7c1529168c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40140", "type": "published-proof-of-concept", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-07T01:00:25.979916Z"}, {"uuid": "8fb47e13-586e-45c3-9d34-ae6c587af6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fortinet_authentication_bypass_cve_2022_40684.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Heyder Andrade <@HeyderAndrade>\", \"Zach Hanley <@hacks_zach>\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability\\n          in the Fortinet FortiOS, FortiProxy, and FortiSwitchManager API\\n          to gain access to a chosen account. And then add a SSH key to the\\n          authorized_keys file of the chosen account, allowing\\n          to login to the system with the chosen account.\\n\\n          Successful exploitation results in remote code execution.\", \"disclosure_date\": \"2022-10-10\", \"fullname\": \"exploit/linux/http/fortinet_authentication_bypass_cve_2022_40684\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/fortinet_authentication_bypass_cve_2022_40684.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/fortinet_authentication_bypass_cve_2022_40684\", \"references\": [\"CVE-2022-40684\", \"URL-https://www.fortiguard.com/psirt/FG-IR-22-377\", \"URL-https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"FortiOS\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:34.241138Z"}, {"uuid": "2096a802-f1ba-4f72-b363-294274a452db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40022", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symmetricom_syncserver_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Steve Campbell\", \"Justin Fatuch Apt4hax\", \"Robert Bronstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection vulnerability in /controller/ping.php.\\n          The S100 through S350 (End of Life) models should be vulnerable to\\n          unauthenticated exploitation due to a session handling vulnerability.\\n          Later models require authentication which is not provided in this module because we can't test it.\\n          The command injection vulnerability is patched in the S650 v2.2 (CVE-2022-40022).\\n          Run 'check' first to determine if vulnerable.\\n          The server limits outbound ports. Ports 25 and 80 TCP were successfully used for SRVPORT\\n          and LPORT while testing this module.\", \"disclosure_date\": \"2022-08-31\", \"fullname\": \"exploit/linux/http/symmetricom_syncserver_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Symmetricom SyncServer Unauthenticated Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/symmetricom_syncserver_rce.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/symmetricom_syncserver_rce\", \"references\": [\"CVE-2022-40022\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-40022\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.464932Z"}, {"uuid": "9d5f639a-9ecf-4aa7-8c34-4fa195f48b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"msutovsky-r7\", \"Ashish Kumar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an SQL injection in login portal, which allows to log in as admin. Next, it allows the attacker to upload malicious files through user modification to achieve RCE.\", \"disclosure_date\": \"2025-01-04\", \"fullname\": \"exploit/multi/http/clinic_pms_sqli_to_rce\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 09:05:41 +0000\", \"name\": \"Clinic's Patient Management System 1.0 - Unauthenticated RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/clinic_pms_sqli_to_rce\", \"references\": [\"CVE-2022-2297\", \"CVE-2025-3096\", \"URL-https://www.cve.org/CVERecord?id=CVE-2022-40471\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Clinic Patient Management System 2.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.499813Z"}, {"uuid": "9618fe83-edff-40d3-8a36-1c1a926143bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40471", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Aaryan Golatkar\", \"O\\u011fulcan Hami G\\u00fcl\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated file upload vulnerability in Clinic's\\n          Patient Management System 1.0. An attacker can upload a PHP web shell and execute\\n          it by leveraging directory listing enabled on the `/pms/user_images` directory.\", \"disclosure_date\": \"2022-10-31\", \"fullname\": \"exploit/multi/http/clinic_pms_fileupload_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Clinic's Patient Management System 1.0 - Unauthenticated RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/clinic_pms_fileupload_rce\", \"references\": [\"EDB-51779\", \"CVE-2022-40471\", \"URL-https://www.cve.org/CVERecord?id=CVE-2022-40471\", \"URL-https://drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Clinic Patient Management System 1.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.326124Z"}, {"uuid": "015e77bc-8724-46a3-95c5-43d728c1b952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/Hackme_news/885", "content": "\u00abReptar\u00bb \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f Google\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Reptar (CVE-2023-23583), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0437\u0430 \u043d\u0435\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0442  Downfall (CVE-2022-40982) \u0438 Zenbleed (CVE-2023-20593) , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Intel. \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. https://www.cyberkendra.com/2023/11/reptar-new-cpu-vulnerability-discovered.html", "creation_timestamp": "2026-09-08T22:00:04.781833Z"}, {"uuid": "f151e52b-52c1-4a05-a1e2-4351da228d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40982", "type": "seen", "source": "https://t.me/Hackme_news/885", "content": "\u00abReptar\u00bb \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f Google\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Reptar (CVE-2023-23583), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0437\u0430 \u043d\u0435\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0442  Downfall (CVE-2022-40982) \u0438 Zenbleed (CVE-2023-20593) , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Intel. \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. https://www.cyberkendra.com/2023/11/reptar-new-cpu-vulnerability-discovered.html", "creation_timestamp": "2026-09-09T00:00:12.386154Z"}, {"uuid": "2f8a6e23-74c7-4cfd-9118-0d20342ee447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/Hackme_news/676", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n\nAcer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-4020 , \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Aspire A315-22, A115-21 \u0438 A315-22G, \u0430 \u0442\u0430\u043a\u0436\u0435 Extensa EX215-21 \u0438 EX215-21G.\n\nhttps://shly.link/iAF5T", "creation_timestamp": "2026-09-09T01:00:04.924925Z"}, {"uuid": "dc6420b9-ea4b-4f1d-90a3-d2f556e4ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40516", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-09T01:00:05.023344Z"}, {"uuid": "9d94c476-70fc-44f1-83ca-f011f98331fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40520", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-09T01:00:05.056111Z"}, {"uuid": "0258c633-07d1-426b-a48e-44c7ee00029d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40516", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-10T00:00:59.285258Z"}, {"uuid": "9592f0fc-b0b2-42b4-b47e-10f7ce3e305d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40520", "type": "seen", "source": "https://t.me/Hackme_news/692", "content": "\u0411\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445 #Qualcomm \u0438 #Lenovo BIOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438.\n\nQualcomm \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0447\u0438\u043f\u0441\u0435\u0442\u0430\u0445, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 CVE-2022-40516 \u0434\u043e CVE-2022-40520 \u2014 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Lenovo ThinkPad X13s, \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u041f\u041a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-10T00:00:59.318485Z"}, {"uuid": "4dbb687c-acb0-4e11-ad79-db68cba5aac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4020", "type": "seen", "source": "https://t.me/Hackme_news/676", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445 Acer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n\nAcer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-4020 , \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Aspire A315-22, A115-21 \u0438 A315-22G, \u0430 \u0442\u0430\u043a\u0436\u0435 Extensa EX215-21 \u0438 EX215-21G.\n\nhttps://shly.link/iAF5T", "creation_timestamp": "2026-09-10T00:00:59.177705Z"}, {"uuid": "29b0c875-59d9-41b5-a6be-c65cd401e953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-10T03:00:05.221076Z"}, {"uuid": "87cd3051-ad23-431e-8f7d-82ab1ccb3b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-10T06:00:05.074977Z"}, {"uuid": "8301e791-07e6-484e-bbbc-580e70d4499e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-10T06:00:05.510339Z"}, {"uuid": "dab2cec3-0c5c-4ba2-b906-fadccb039ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-10T06:00:06.154161Z"}, {"uuid": "93414137-d7e0-4f68-a1af-63ec745e471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:11.035440Z"}, {"uuid": "88ee07d2-3762-4e98-ae27-a93a21955e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-11T00:00:49.891904Z"}, {"uuid": "b57c1c45-5475-4b4c-91c0-6ff9ce428741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-11T00:00:50.304063Z"}, {"uuid": "9a704a5e-90f1-454e-92e2-bee9b541cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-11T00:00:50.990075Z"}, {"uuid": "34c5b0f3-b4bb-45e0-831a-9ff829693d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.778527Z"}, {"uuid": "4d949ef6-595a-4772-af1a-d2823cc6ca69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:03.597485Z"}, {"uuid": "098acf70-5fa0-46ba-9834-8ae7cb46ff9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:09.089242Z"}, {"uuid": "ebc0e885-f109-4339-a9cd-80367c67f31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:08.248867Z"}, {"uuid": "47f0e52c-e74a-4254-aa60-e1e971da292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:09.516173Z"}]}