{"metadata": {"vulnerability": "cve-2020-2696", "count": 23, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 15}}, "data": [{"timestamp": "2019-12-10T00:00:00Z", "date_only": false, "value": "2019-12-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-2696", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-01-15T00:00:00Z", "date_only": false, "value": "2020-01-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-037", "record": "CERTFR-2020-AVI-037", "field": "revisions.0.revision_date"}, {"timestamp": "2020-01-15T16:34:07Z", "date_only": false, "value": "2020-01-15T16:34:07.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-2696", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-01-15T17:15:00Z", "date_only": false, "value": "2020-01-15T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7CV3-8R9M-FWCQ", "record": "GHSA-7CV3-8R9M-FWCQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-01-15T17:15:00Z", "date_only": false, "value": "2020-01-15T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-2696", "record": "GSD-2020-2696", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-01-15T17:15:26.753Z", "date_only": false, "value": "2020-01-15T17:15:26.753", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2696", "record": "FKIE_CVE-2020-2696", "field": "published"}, {"timestamp": "2020-01-17T00:00:00Z", "date_only": true, "value": "2020-01-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-07311", "record": "CNVD-2020-07311", "field": "submitTime"}, {"timestamp": "2020-01-20T12:06:20Z", "date_only": false, "value": "2020-01-20T12:06:20.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "cve-2020-2696", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-02-14T00:00:00Z", "date_only": true, "value": "2020-02-14", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-07311", "record": "CNVD-2020-07311", "field": "openTime"}, {"timestamp": "2021-02-03T12:43:01Z", "date_only": false, "value": "2021-02-03T12:43:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2629", "record": "CVE-2020-2696", "field": "creation_timestamp", "uuid": "4ec11d30-802b-456f-83ee-9dc9d96ae00e", "content": "The INFILTRATE effect: 6 bugs in 6 months (PoCs):\n- LPE via xscreensaver (CVE-2019-3010);\n- Low impact information disclosure via Solaris xlock (CVE-2020-2656);\n- LPE via CDE (CVE-2020-2696, CVE-2020-2944);\n- Stack-based buffer overflow in CDE libDtSvc (CVE-2020-2851);\n- Heap-based buffer overflow in Solaris whodo and w commands (CVE-2020-2771)\nhttps://github.com/0xdea/raptor_infiltrate20", "url": "https://t.me/CyberSecurityTechnologies/2629"}, {"timestamp": "2022-05-24T17:06:43Z", "date_only": false, "value": "2022-05-24T17:06:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7CV3-8R9M-FWCQ", "record": "GHSA-7CV3-8R9M-FWCQ", "field": "published"}, {"timestamp": "2022-10-25T17:52:00Z", "date_only": false, "value": "2022-10-25T17:52Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-2696", "record": "GSD-2020-2696", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-10-25T19:00:24Z", "date_only": false, "value": "2022-10-25T19:00:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7CV3-8R9M-FWCQ", "record": "GHSA-7CV3-8R9M-FWCQ", "field": "modified"}, {"timestamp": "2023-12-13T01:21:51.200Z", "date_only": false, "value": "2023-12-13T01:21:51.200387Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-2696", "record": "GSD-2020-2696", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T07:17:01.595Z", "date_only": false, "value": "2024-08-04T07:17:01.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-2696", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-30T14:42:00.230Z", "date_only": false, "value": "2024-09-30T14:42:00.230254Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-2696", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-30T14:42:00.230Z", "date_only": false, "value": "2024-09-30T14:42:00.230254Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2696", "record": "FKIE_CVE-2020-2696", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-30T14:51:10.572Z", "date_only": false, "value": "2024-09-30T14:51:10.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-2696", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-30T14:51:10.572Z", "date_only": false, "value": "2024-09-30T14:51:10.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-2696", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-11T03:23:31Z", "date_only": false, "value": "2024-10-11T03:23:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/601", "record": "CVE-2020-2696", "field": "creation_timestamp", "uuid": "b7a0604a-d05f-4b49-99d9-b6c97f962cc3", "content": "#exploit\n1. CVE-2020-2696:\nLPE via Common Desktop Environment (Solaris 10) dtsession\nhttps://techblog.mediaservice.net/2020/01/local-privilege-escalation-via-cde-dtsession\n]-> https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtsession_ipa.c\n\n2. CVE-2020-1712:\nsystemd - UaF when asynchronous polkit\nhttps://www.openwall.com/lists/oss-security/2020/02/05/1", "url": "https://t.me/CyberSecurityTechnologies/601"}, {"timestamp": "2026-06-17T03:12:41.713Z", "date_only": false, "value": "2026-06-17T03:12:41.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2696", "record": "FKIE_CVE-2020-2696", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:02.643Z", "date_only": false, "value": "2026-09-01T17:01:02.643410Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2280", "record": "CVE-2020-2696", "field": "creation_timestamp", "uuid": "9d55333c-8d3c-4b83-aac1-36725b0467a3", "content": "SCADA Security\nThe Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability (PoC for CVE-2020-6088)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1008\n\nMalware analysis\n1. Excel spreadsheets push SystemBC malware\nhttps://isc.sans.edu/diary/rss/27060\n2. New Example of XSL Script Processing aka \"Mitre T1220\"\nhttps://isc.sans.edu/forums/diary/New+Example+of+XSL+Script+Processing+aka+Mitre+T1220/27056\n3. Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests\nhttps://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-malicious-traffic-in-analytics-requests\n4. Kobalos - A complex Linux threat to high performance computing infrastructure\nhttps://www.welivesecurity.com/2021/02/02/kobalos-complex-linux-threat-high-performance-computing-infrastructure\n]-> Report in .pdf:\nhttps://www.welivesecurity.com/wp-content/uploads/2021/01/ESET_Kobalos.pdf\n\nThe INFILTRATE effect: 6 bugs in 6 months (PoCs):\n- LPE via xscreensaver (CVE-2019-3010);\n- Low impact information disclosure via Solaris xlock (CVE-2020-2656);\n- LPE via CDE (CVE-2020-2696, CVE-2020-2944);\n- Stack-based buffer overflow in CDE libDtSvc (CVE-2020-2851);\n- Heap-based buffer overflow in Solaris whodo and w commands (CVE-2020-2771)\nhttps://github.com/0xdea/raptor_infiltrate20\n\nCVE-2021-1791:\nApple macOS - Fairplay OOB Read PoC\nhttps://gist.github.com/pwn0rz/e34ab9f6e46956621a9d4f98cf222320\n\nThreat Research\n1. Spoofing and Attacking With Skype (PoC):\n- Spoofing Links/File Names/File Size/Shared Contacts\n- Crash Skype For Any User\n- Spear Phishing With Skype\u2019s Domain\n- Breaking Out Of The Chat Bubble\nhttps://blog.thecybersecuritytutor.com/spoofing-and-attacking-with-skype\n2. The State of 0-day In the Wild Exploitation\nhttps://github.com/maddiestone/ConPresentations/blob/master/Enigma2021.StateOf0day.pdf", "url": "https://t.me/cissp/2280"}, {"timestamp": "2026-09-11T19:00:05.158Z", "date_only": false, "value": "2026-09-11T19:00:05.158269Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2280", "record": "CVE-2020-2696", "field": "creation_timestamp", "uuid": "2a5b4325-72d9-4dd4-91f9-820663fced21", "content": "SCADA Security\nThe Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability (PoC for CVE-2020-6088)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1008\n\nMalware analysis\n1. Excel spreadsheets push SystemBC malware\nhttps://isc.sans.edu/diary/rss/27060\n2. New Example of XSL Script Processing aka \"Mitre T1220\"\nhttps://isc.sans.edu/forums/diary/New+Example+of+XSL+Script+Processing+aka+Mitre+T1220/27056\n3. Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests\nhttps://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-malicious-traffic-in-analytics-requests\n4. Kobalos - A complex Linux threat to high performance computing infrastructure\nhttps://www.welivesecurity.com/2021/02/02/kobalos-complex-linux-threat-high-performance-computing-infrastructure\n]-> Report in .pdf:\nhttps://www.welivesecurity.com/wp-content/uploads/2021/01/ESET_Kobalos.pdf\n\nThe INFILTRATE effect: 6 bugs in 6 months (PoCs):\n- LPE via xscreensaver (CVE-2019-3010);\n- Low impact information disclosure via Solaris xlock (CVE-2020-2656);\n- LPE via CDE (CVE-2020-2696, CVE-2020-2944);\n- Stack-based buffer overflow in CDE libDtSvc (CVE-2020-2851);\n- Heap-based buffer overflow in Solaris whodo and w commands (CVE-2020-2771)\nhttps://github.com/0xdea/raptor_infiltrate20\n\nCVE-2021-1791:\nApple macOS - Fairplay OOB Read PoC\nhttps://gist.github.com/pwn0rz/e34ab9f6e46956621a9d4f98cf222320\n\nThreat Research\n1. Spoofing and Attacking With Skype (PoC):\n- Spoofing Links/File Names/File Size/Shared Contacts\n- Crash Skype For Any User\n- Spear Phishing With Skype\u2019s Domain\n- Breaking Out Of The Chat Bubble\nhttps://blog.thecybersecuritytutor.com/spoofing-and-attacking-with-skype\n2. The State of 0-day In the Wild Exploitation\nhttps://github.com/maddiestone/ConPresentations/blob/master/Enigma2021.StateOf0day.pdf", "url": "https://t.me/cissp/2280"}]}