{"uuid": "66cdc83c-8ef2-44e2-b7cc-2e354463da8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17087", "type": "seen", "source": "https://t.me/cissp/3958", "content": "Offensive security\nTechniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on \ud83e\udd13CVE-2020-17087 and an off-by-one overflow\nhttps://github.com/vp777/Windows-Non-Paged-Pool-Overflow-Exploitation\n\nThreat Research\n1. Detecting Jackson deserialization vulnerabilities with CodeQL\nhttps://blog.gypsyengineer.com/en/security/detecting-jackson-deserialization-vulnerabilities-with-codeql.html\n2. Rotten Apples: MacOS Codesigning Translocation Vulnerability\nhttps://occamsec.com/rotten-apples-macos-codesigning-translocation-vulnerability/\n\nThe Linux Kernel Module Programming Guide\nhttps://sysprog21.github.io/lkmpg\n\nexploit\nPoC of CVE-2021-2394:\nOracle Weblogic Server 10.x/12.x/14.x Core RCE\nhttps://github.com/lz2y/CVE-2021-2394", "creation_timestamp": "2026-09-01T17:00:44.227392Z"}