{"uuid": "b69948c9-3bbd-4273-8728-58f0d9d1ec9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2950", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2025", "content": "1. Hunting for Bugs in Android App\nhttps://medium.com/bugbountywriteup/hunting-for-bugs-in-android-app-fe9158a556d3\n\n2. Template Injection in Action\nhttps://gosecure.github.io/template-injection-workshop/#0\n\n3. Bypass all Powershell security features\nhttps://github.com/OmerYa/Invisi-Shell\n\nCVE-2020-2950:\nTurning AMF Deserialize bug to Java Deserialize bug (PoC)\nhttps://medium.com/@peterjson/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f\n\n1. Cookie Tossing to RCE on Google Cloud JupyterLab (PoC)\nhttps://blog.s1r1us.ninja/bug-bounty/cookie-tossing-to-rce-on-google-cloud-jupyter-notebooks\n\n2. Potentially ongoing worldwide UDP:443 (EDT) DDoS amplify attack against Citrix (NetScaler) Gateway\nhttps://www.meinekleinefarm.net/potentially-ongoing-worldwide-udp443-edt-ddos-amplify-attack-against-citrix-netscaler-gateway\n\n3. SQL injection penetrates PostgreSQL (bypass tricks)\nhttps://xz.aliyun.com/t/8621\n\n4. Helping secure DOMPurify. Part 1.\nhttps://research.securitum.com/helping-secure-dompurify-part-1\n]-> Harden protection against mutation XSS caused by namespace switching:\nhttps://github.com/cure53/DOMPurify/pull/495\n\n1. Using CodeQL to Find Vulnerable Memcpy Calls in Open Source Projects\nhttps://www.cyberark.com/resources/threat-research-blog/make-memcpy-safe-again-codeql\n\n2. CISA Releases Free Detection Tool for Azure/M365 Environment\nhttps://github.com/cisagov/Sparrow", "creation_timestamp": "2026-09-11T22:00:05.741687Z"}