{"metadata": {"vulnerability": "CVE-2020-24656", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2020-08-26T00:00:00Z", "date_only": false, "value": "2020-08-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-24656", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-08-26T04:27:53Z", "date_only": false, "value": "2020-08-26T04:27:53.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-24656", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-08-26T05:15:00Z", "date_only": false, "value": "2020-08-26T05:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-58VG-XH6Q-3CQ6", "record": "GHSA-58VG-XH6Q-3CQ6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-08-26T05:15:00Z", "date_only": false, "value": "2020-08-26T05:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-24656", "record": "GSD-2020-24656", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-08-26T05:15:10.963Z", "date_only": false, "value": "2020-08-26T05:15:10.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-24656", "record": "FKIE_CVE-2020-24656", "field": "published"}, {"timestamp": "2020-08-28T00:26:50Z", "date_only": false, "value": "2020-08-28T00:26:50.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-24656", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-09-03T14:31:00Z", "date_only": false, "value": "2020-09-03T14:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-24656", "record": "GSD-2020-24656", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-09-04T11:10:05Z", "date_only": false, "value": "2020-09-04T11:10:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1692", "record": "CVE-2020-24656", "field": "creation_timestamp", "uuid": "ad1b5449-e48d-4348-ab15-87ba822fa2aa", "content": "Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis", "url": "https://t.me/CyberSecurityTechnologies/1692"}, {"timestamp": "2022-05-24T17:26:43Z", "date_only": false, "value": "2022-05-24T17:26:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-58VG-XH6Q-3CQ6", "record": "GHSA-58VG-XH6Q-3CQ6", "field": "published"}, {"timestamp": "2022-05-24T17:26:43Z", "date_only": false, "value": "2022-05-24T17:26:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-58VG-XH6Q-3CQ6", "record": "GHSA-58VG-XH6Q-3CQ6", "field": "modified"}, {"timestamp": "2023-12-13T01:22:12.378Z", "date_only": false, "value": "2023-12-13T01:22:12.378543Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-24656", "record": "GSD-2020-24656", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T15:19:09.215Z", "date_only": false, "value": "2024-08-04T15:19:09.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-24656", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T15:19:09.215Z", "date_only": false, "value": "2024-08-04T15:19:09.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-24656", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:05:55.793Z", "date_only": false, "value": "2026-06-17T03:05:55.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-24656", "record": "FKIE_CVE-2020-24656", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:09.986Z", "date_only": false, "value": "2026-09-01T17:01:09.986881Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/1801", "record": "CVE-2020-24656", "field": "creation_timestamp", "uuid": "ff7deb9d-e859-4dbb-ade9-79f743b39359", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "url": "https://t.me/cissp/1801"}, {"timestamp": "2026-09-11T23:00:05.589Z", "date_only": false, "value": "2026-09-11T23:00:05.589570Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/1801", "record": "CVE-2020-24656", "field": "creation_timestamp", "uuid": "a91281da-2871-45d0-b653-af8a4b466992", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "url": "https://t.me/cissp/1801"}]}