{"metadata": {"vulnerability": "cve-2020-6207", "count": 58, "kinds": {"milestone": 4, "sighting": 22, "kev": 11, "other": 21}}, "data": [{"timestamp": "2020-01-08T00:00:00Z", "date_only": false, "value": "2020-01-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-6207", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-03-10T20:20:36Z", "date_only": false, "value": "2020-03-10T20:20:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-6207", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-03-10T21:15:00Z", "date_only": false, "value": "2020-03-10T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R9HH-CQ9H-XF68", "record": "GHSA-R9HH-CQ9H-XF68", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-03-10T21:15:00Z", "date_only": false, "value": "2020-03-10T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-6207", "record": "GSD-2020-6207", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-03-10T21:15:14.793Z", "date_only": false, "value": "2020-03-10T21:15:14.793", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-6207", "record": "FKIE_CVE-2020-6207", "field": "published"}, {"timestamp": "2020-03-11T00:00:00Z", "date_only": false, "value": "2020-03-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-140", "record": "CERTFR-2020-AVI-140", "field": "revisions.0.revision_date"}, {"timestamp": "2020-03-11T00:00:00Z", "date_only": true, "value": "2020-03-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-18537", "record": "CNVD-2020-18537", "field": "submitTime"}, {"timestamp": "2020-03-20T00:00:00Z", "date_only": true, "value": "2020-03-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-18537", "record": "CNVD-2020-18537", "field": "openTime"}, {"timestamp": "2020-09-08T00:00:00Z", "date_only": false, "value": "2020-09-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-549", "record": "CERTFR-2020-AVI-549", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-10T00:00:00Z", "date_only": false, "value": "2020-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-722", "record": "CERTFR-2020-AVI-722", "field": "revisions.0.revision_date"}, {"timestamp": "2021-01-15T03:33:25Z", "date_only": false, "value": "2021-01-15T03:33:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mzMPJUtI8bSjYe6VDdVcO-nYDGgxJsJc_GR3bIyj6eBfmw", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "d302b863-eaa9-4eb7-8e97-1e5f3d6ccd49"}, {"timestamp": "2021-01-16T11:50:06Z", "date_only": false, "value": "2021-01-16T11:50:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2506", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "6a9ddca7-a3f1-4b78-bee7-19956f20fc11", "content": "#Research\n\"An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers\", 2020.\n]-> PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)\nhttps://github.com/chipik/SAP_EEM_CVE-2020-6207", "url": "https://t.me/CyberSecurityTechnologies/2506"}, {"timestamp": "2021-01-23T09:55:55Z", "date_only": false, "value": "2021-01-23T09:55:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/3781", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "6f672f12-5d44-4277-860e-1e31acd959e3", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 #Zeroday: A publicly available fully-functional exploit that could be used to target SAP enterprise software.\n\nThe exploit leverages a vulnerability, tracked as\u00a0CVE-2020-6207, that stems from a missing authentication check in SAP Solution Manager (SolMan) version 7.2.\n\nhttps://thehackernews.com/2021/01/beware-fully-functional-released-online.html", "url": "https://t.me/cKure/3781"}, {"timestamp": "2021-01-24T14:36:01Z", "date_only": false, "value": "2021-01-24T14:36:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2562", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "8a8482f9-7d3f-4db1-8c1f-a575cdf126cc", "content": "#Analytics\n10 most exploited vulnerabilities of the week (january 18-24)\nCVE-2020-14882/883:\nhttps://t.me/cybersecuritytechnologies/2004\nCVE-2021-2109:\nhttps://t.me/cybersecuritytechnologies/2540\nCVE-2020-6207:\nhttps://t.me/cybersecuritytechnologies/2506\nCVE-2021-3114/3115:\nArbitrary command execution in Go\nhttps://blog.golang.org/path-security\nCVE-2019-8791:\nhttps://t.me/cybersecuritytechnologies/2535\nCVE-2021-3129:\nhttps://t.me/cybersecuritytechnologies/2557\nCVE-2020-1033:\nhttps://t.me/cybersecuritytechnologies/2528\nCVE-2019-8792:\nhttps://t.me/cybersecuritytechnologies/2535", "url": "https://t.me/CyberSecurityTechnologies/2562"}, {"timestamp": "2021-03-25T21:56:17Z", "date_only": false, "value": "2021-03-25T21:56:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/sap/cve_2020_6207_solman_rce.rb", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "12ccc11a-369e-4445-aaab-1ed09600a76e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/sap/cve_2020_6207_solman_rce.rb"}, {"timestamp": "2021-03-25T21:56:17Z", "date_only": false, "value": "2021-03-25T21:56:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/sap/cve_2020_6207_solman_rs.rb", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "9bc6bb68-d09a-4d06-ab98-42bf4d76daa1", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/sap/cve_2020_6207_solman_rs.rb"}, {"timestamp": "2021-06-15T20:06:15Z", "date_only": false, "value": "2021-06-15T20:06:15.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "cve-2020-6207", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-06-17T14:30:00Z", "date_only": false, "value": "2021-06-17T14:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-6207", "record": "GSD-2020-6207", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "timestamps.asserted_at", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-6207", "field": "timestamps.asserted_at", "uuid": "bdd26347-139e-4ed5-a9b7-348cc7faca47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-6207", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-6207", "record": "GSD-2020-6207", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-6207", "field": "evidence.0.details.added_date", "uuid": "bdd26347-139e-4ed5-a9b7-348cc7faca47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "evidence.0.details.date_added", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "timestamps.first_seen_at", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-6207", "field": "timestamps.first_seen_at", "uuid": "bdd26347-139e-4ed5-a9b7-348cc7faca47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "status.status_updated_at", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-6207", "field": "status.status_updated_at", "uuid": "bdd26347-139e-4ed5-a9b7-348cc7faca47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-6207", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "24558ebf-e16f-4580-a8dc-bb2c62fb1c21"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "c5e3beb4-0add-4eee-923c-3b4f41c312ad"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "evidence.0.details.due_date", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-6207", "record": "GSD-2020-6207", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:10:44Z", "date_only": false, "value": "2022-05-24T17:10:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R9HH-CQ9H-XF68", "record": "GHSA-R9HH-CQ9H-XF68", "field": "published"}, {"timestamp": "2023-11-17T02:27:15Z", "date_only": false, "value": "2023-11-17T02:27:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/179", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "19ef7481-c29d-4b0d-b4a8-98df14d2d697", "content": "#ExploitObserverAlert\n\nCVE-2020-6207\n\nDESCRIPTION: Exploit Observer has 21 entries related to CVE-2020-6207. SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.\n\nFIRST-EPSS: 0.974210000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/179"}, {"timestamp": "2023-12-13T01:21:55.060Z", "date_only": false, "value": "2023-12-13T01:21:55.060549Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-6207", "record": "GSD-2020-6207", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T08:55:22.109Z", "date_only": false, "value": "2024-08-04T08:55:22.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-6207", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:21:58.267Z", "date_only": false, "value": "2024-12-24T20:21:58.267232Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970934", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "07b95ed9-445a-4059-8cef-0d87ad7e7e81", "url": "https://feedsin.space/feed/CISAKevBot/items/2970934"}, {"timestamp": "2025-01-29T20:13:34.499Z", "date_only": false, "value": "2025-01-29T20:13:34.499731Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-6207", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T20:13:34.499Z", "date_only": false, "value": "2025-01-29T20:13:34.499731Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-6207", "record": "FKIE_CVE-2020-6207", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:48Z", "date_only": false, "value": "2025-01-30T02:17:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2xenWatdi3Bm_NksPCE-fp5bJiS9z03rfFXupGvGflNqjeR_", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "5bfbf68a-a531-4d96-ab14-1a41e9e98c06"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "1095e11e-6230-4269-9d8c-5d9fe129bb7b"}, {"timestamp": "2025-02-23T02:09:49Z", "date_only": false, "value": "2025-02-23T02:09:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "c604e2eb-3779-4ce2-9b8b-bad14fc66aa7"}, {"timestamp": "2025-02-23T04:10:30Z", "date_only": false, "value": "2025-02-23T04:10:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "0a7fb93b-e319-4f7d-8e35-090383d98757"}, {"timestamp": "2025-08-31T03:13:03Z", "date_only": false, "value": "2025-08-31T03:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "08cf6bbc-e172-480a-b8d5-27221c33d617"}, {"timestamp": "2025-10-21T23:35:49.068Z", "date_only": false, "value": "2025-10-21T23:35:49.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-6207", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:49.068Z", "date_only": false, "value": "2025-10-21T23:35:49.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-6207", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:50Z", "date_only": false, "value": "2025-10-22T00:31:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R9HH-CQ9H-XF68", "record": "GHSA-R9HH-CQ9H-XF68", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-6207", "field": "timestamps.recorded_at", "uuid": "e54e5483-3d09-4b62-9943-3ff3be833bb6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:29:02.311Z", "date_only": false, "value": "2026-02-02T12:29:02.311364Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e54e5483-3d09-4b62-9943-3ff3be833bb6", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "7cde1835-a427-4501-a24b-205dc553f187", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e54e5483-3d09-4b62-9943-3ff3be833bb6"}, {"timestamp": "2026-06-17T03:22:52.123Z", "date_only": false, "value": "2026-06-17T03:22:52.123", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-6207", "record": "FKIE_CVE-2020-6207", "field": "lastModified"}, {"timestamp": "2026-06-19T12:48:03.886Z", "date_only": false, "value": "2026-06-19T12:48:03.886370Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42b03515-1e73-4929-9621-32c00935c9a6", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "28cbe90a-e3e6-4d1f-85c0-b3e209c2d667", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42b03515-1e73-4929-9621-32c00935c9a6"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-6207", "field": "timestamps.recorded_at", "uuid": "bdd26347-139e-4ed5-a9b7-348cc7faca47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:30.295Z", "date_only": false, "value": "2026-06-23T14:04:30.295741Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bdd26347-139e-4ed5-a9b7-348cc7faca47", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "413b30c3-1660-4ace-a669-ff6ae7877442", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bdd26347-139e-4ed5-a9b7-348cc7faca47"}, {"timestamp": "2026-09-01T17:01:06.283Z", "date_only": false, "value": "2026-09-01T17:01:06.283287Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2113", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "f2158c53-f1ce-44cf-9de5-ae8db817bdfd", "content": "1. Confucius APT deploys Warzone RAT\nhttps://www.uptycs.com/blog/confucius-apt-deploys-warzone-rat\n\n2. Analyzing Qakbot using Brim\u2019s No-code threat hunting\nhttps://medium.com/brim-securitys-knowledge-funnel/analyzing-qakbot-using-brims-no-code-threat-hunting-8e3415c3338d\n\nMultiple vulnerabilities in FiberHome (GPON FTTH, software ver. RP2602) HG6245D routers (PoCs)\nhttps://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html\n\n\"An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers\", 2020.\n]-> PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)\nhttps://github.com/chipik/SAP_EEM_CVE-2020-6207\n\n1. 0Day RCE in Apple's Travel Portal (PoC)\nhttps://github.com/httpvoid/writeups/blob/main/Apple-RCE.md\n\n2. Stealing Your Private YouTube Videos\nhttps://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time\n\n1. 0day VirtualBox 6.1.16 Escape for RealWorld CTF 2020/2021\nhttps://secret.club/2021/01/14/vbox-escape.html\nPoC:\nhttps://github.com/Sauercloud/RWCTF21-VirtualBox-61-escape\n\n2. Lateral Movement using DCOM Objects\nhttps://www.scorpiones.io/articles/lateral-movement-using-dcom-objects", "url": "https://t.me/cissp/2113"}, {"timestamp": "2026-09-11T21:00:05.132Z", "date_only": false, "value": "2026-09-11T21:00:05.132149Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2113", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "25a4f04a-8448-4b0e-8b45-eeae240275b3", "content": "1. Confucius APT deploys Warzone RAT\nhttps://www.uptycs.com/blog/confucius-apt-deploys-warzone-rat\n\n2. Analyzing Qakbot using Brim\u2019s No-code threat hunting\nhttps://medium.com/brim-securitys-knowledge-funnel/analyzing-qakbot-using-brims-no-code-threat-hunting-8e3415c3338d\n\nMultiple vulnerabilities in FiberHome (GPON FTTH, software ver. RP2602) HG6245D routers (PoCs)\nhttps://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html\n\n\"An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers\", 2020.\n]-> PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)\nhttps://github.com/chipik/SAP_EEM_CVE-2020-6207\n\n1. 0Day RCE in Apple's Travel Portal (PoC)\nhttps://github.com/httpvoid/writeups/blob/main/Apple-RCE.md\n\n2. Stealing Your Private YouTube Videos\nhttps://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time\n\n1. 0day VirtualBox 6.1.16 Escape for RealWorld CTF 2020/2021\nhttps://secret.club/2021/01/14/vbox-escape.html\nPoC:\nhttps://github.com/Sauercloud/RWCTF21-VirtualBox-61-escape\n\n2. Lateral Movement using DCOM Objects\nhttps://www.scorpiones.io/articles/lateral-movement-using-dcom-objects", "url": "https://t.me/cissp/2113"}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-18)", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "0c348498-4b1c-4f05-8339-345055cf8806"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-19)", "record": "CVE-2020-6207", "field": "creation_timestamp", "uuid": "dd258a21-a64d-4afe-b866-86f92ddd4746"}]}