{"vulnerability": "CVE-2020-12928", "sightings": [{"uuid": "77723d79-ce4d-4840-9cf8-5c2614bf36f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1922", "content": "#exploit\nCVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\nCVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947", "creation_timestamp": "2021-04-10T19:12:32.000000Z"}, {"uuid": "1ac40602-9c8b-4476-9404-d95dccec1437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "seen", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-01T17:01:08.824352Z"}, {"uuid": "d9f5a7eb-5f57-4810-9e13-bc59db5b1e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "seen", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-02T01:04:58.676051Z"}, {"uuid": "29f8fe4c-fb9d-4161-8a82-d9537903eaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "seen", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-03T12:00:04.997245Z"}, {"uuid": "2f523ed0-35e5-410c-bf17-56b874ff269a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "published-proof-of-concept", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-04T00:00:49.162304Z"}, {"uuid": "63b1f5fa-6868-41b0-8809-0bbd43fa1c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-11T22:00:05.227952Z"}, {"uuid": "10ddd76f-0fb6-42a5-9baf-adbb1e99159f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12928", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-12T00:00:12.004096Z"}]}