{"uuid": "a2d9106f-232f-4507-bbec-9275cd732f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1878", "content": "Malware \n1. Sophisticated new Android malware marks the latest evolution of mobile ransomware\nhttps://www.microsoft.com/security/blog/2020/10/08/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware/\n\n2. MontysThree: \nIndustrial espionage with steganography\nhttps://securelist.com/montysthree-industrial-espionage/98972/\n\n3. Ryuk Ransomware Writeup\nhttps://thedfirreport.com/2020/10/08/ryuks-return/\n\nRed team\n1. Arbitrary code execution on Facebook for Android through download feature (PoC)\nhttps://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f\n\n2. Bypassing DOMPurify again with mutation XSS\nhttps://portswigger.net/research/bypassing-dompurify-again-with-mutation-xss\n\n3.Powershell Logging: \nObfuscation and Some New (ISH) Bypasses\nPart 1:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-1/\nPart 2:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-2/\n\n4.Possible attacks against VoIP\nhttps://medium.com/bugbountywriteup/a-tale-of-voip-security-testing-39937fe8c6fd\n\n5.PowerShell functions for Red Team to collect data from a machine\nhttps://securityonline.info/powershell-red-team/\n\n\ud83d\ude03\nCVE-2020-13756:\nSabberworm PHP CSS parser (before 8.3.1)\nsuffers from a code injection vulnerability (PoC)\nhttps://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html\n\nUEFI fuzzing :\nPart 1. Moving From Common-Sense Knowledge About UEFI To Actually Dumping UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/\nPart 2. Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/\n\n\ud83d\ude03\nCVE-2020-5902 (9.8/10):\nIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), has a RCE vulnerability in undisclosed pages (PoCs)\nhttps://www.cvebase.com/cve/2020/5902", "creation_timestamp": "2026-09-11T23:00:06.003018Z"}