{"uuid": "25a4f04a-8448-4b0e-8b45-eeae240275b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-6207", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2113", "content": "1. Confucius APT deploys Warzone RAT\nhttps://www.uptycs.com/blog/confucius-apt-deploys-warzone-rat\n\n2. Analyzing Qakbot using Brim\u2019s No-code threat hunting\nhttps://medium.com/brim-securitys-knowledge-funnel/analyzing-qakbot-using-brims-no-code-threat-hunting-8e3415c3338d\n\nMultiple vulnerabilities in FiberHome (GPON FTTH, software ver. RP2602) HG6245D routers (PoCs)\nhttps://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html\n\n\"An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers\", 2020.\n]-> PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)\nhttps://github.com/chipik/SAP_EEM_CVE-2020-6207\n\n1. 0Day RCE in Apple's Travel Portal (PoC)\nhttps://github.com/httpvoid/writeups/blob/main/Apple-RCE.md\n\n2. Stealing Your Private YouTube Videos\nhttps://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time\n\n1. 0day VirtualBox 6.1.16 Escape for RealWorld CTF 2020/2021\nhttps://secret.club/2021/01/14/vbox-escape.html\nPoC:\nhttps://github.com/Sauercloud/RWCTF21-VirtualBox-61-escape\n\n2. Lateral Movement using DCOM Objects\nhttps://www.scorpiones.io/articles/lateral-movement-using-dcom-objects", "creation_timestamp": "2026-09-11T21:00:05.132149Z"}