{"uuid": "811d639f-2f87-4fa2-8998-baa721ded906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7461", "type": "seen", "source": "https://t.me/cissp/2967", "content": "exploit\nCVE-2020-7461:\n1-day PoC for DHCP heap overflow vulnerability (NAME:WRECK) in FreeBSD\nhttps://github.com/knqyf263/CVE-2020-7461\n\nExploiting System Mechanic Driver:\nAbusing Token Privileges for LPE\nhttps://voidsec.com/exploiting-system-mechanic-driver\n]-> PoC:\nhttps://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/iolo_System_Mechanic_Pro_v.15.5.0.61/iolo_System_Mechanic_Pro_v.15.5.0.61.cpp\n\nRed Team Tactics:\n1. JavaScript prototype pollution: practice of finding and exploitation\nhttps://infosecwriteups.com/javascript-prototype-pollution-practice-of-finding-and-exploitation-f97284333b2\n2. UUID Shellcode Execution Implementation in C# and DInvoke\nhttps://blog.sunggwanchoi.com/eng-uuid-shellcode-execution\n\n1-click RCE in Telegram, Nextcloud, VLC, Libre/OpenOffice, Bitcoin/Dogecoin Wallets, Wireshark, Mumble, WinSCP (PoCs)\nhttps://positive.security/blog/url-open-rce\n\nThreat Research:\nChrome RCE Vulnerability\n(PoC for CVE-2021-21220)\nhttps://paper.seebug.org/1556\n+ Chrome V8 JavaScript Engine RCE:\nhttps://packetstormsecurity.com/files/162154/chromiumv8-overflow.txt", "creation_timestamp": "2026-09-02T01:04:44.850197Z"}