{"uuid": "ae033b87-12ce-4883-b39c-35d1535b90c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13550", "type": "seen", "source": "https://t.me/cissp/2360", "content": "Red_Team_Tactics\n1. One thousand and one ways to copy your shellcode to memory (VBA Macros)\nhttps://adepts.of0x.cc/alternatives-copy-shellcode\n\n2. Retrieve LAPS password from the LDAP\ud83d\ude01\nhttps://github.com/swisskyrepo/SharpLAPS\n\n3. A tool to test security of json web token\nhttps://github.com/DontPanicO/jwtXploiter\n\nSCADA_Security\nVulnerabilities in Advantech WebAccess/SCADA\n1. CVE-2020-13550:\nAdvantech WebAccess/SCADA installation local file inclusion (PoC)\nhttps://talosintelligence.com/\nvulnerability_reports/TALOS-2020-1168\n\n2. CVE-2020-13551, CVE-2020-13552, CVE-2020-13553, CVE-2020-13554, CVE-2020-13555:\nAdvantech WebAccess/SCADA installation privilege escalation vulnerability (PoCs)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1169\n\nThreat_Research\nExploiting Out-Of-Band XXE via LOCK Method write-up\nhttps://dhiyaneshgeek.github.io/web/security/2021/02/19/exploiting-out-of-band-xxe\n// The XXE flaw can allow an attacker to turn the XML parser into a proxy which allows local/remote content to be served on request. It allows an attacker to:\n- read files on the application server;\n- interact with any back-end or external systems that the application itself can access", "creation_timestamp": "2026-09-02T01:04:52.083264Z"}