{"vulnerability": "CVE-2020-13509", "sightings": [{"uuid": "3ac8769f-4adb-430e-8a9c-731ebe63d790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13509", "type": "seen", "source": "https://t.me/cibsecurity/21028", "content": "\u203c CVE-2020-13509 \u203c\n\nAn information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) Using the IRP 0x9c4060cc gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability and this access could allow for information leakage of sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-18T02:43:07.000000Z"}, {"uuid": "b670fcab-3ee4-4b59-bb65-4c657924fc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13509", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2318", "content": "Multiple vulnerabilities in NZXT computer monitoring software (PoCs)\nCVE-2020-13509 - CVE-2020-13511:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1110\nCVE-2020-13512 - CVE-2020-13514:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1111\nCVE-2020-13515:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1112\nCVE-2020-13516:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1113\nCVE-2020-13517:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1114\nCVE-2020-13518:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1115\nCVE-2020-13519:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1116", "creation_timestamp": "2025-01-04T20:00:16.000000Z"}, {"uuid": "a18f6158-5b9d-47b2-8e43-7232f252c95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13509", "type": "seen", "source": "https://t.me/cissp/2115", "content": "Multiple vulnerabilities in NZXT computer monitoring software (PoCs)\ud83d\ude01\nCVE-2020-13509 - CVE-2020-13511:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1110\nCVE-2020-13512 - CVE-2020-13514:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1111\nCVE-2020-13515:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1112\nCVE-2020-13516:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1113\nCVE-2020-13517:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1114\nCVE-2020-13518:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1115\nCVE-2020-13519:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1116\n\nMultiple critical vulnerabilities\ud83d\ude01 (CVE-2020-8461, CVE-2020-8462, CVE-2020-8463, CVE-2020-8464, CVE-2020-8465, CVE-2020-8466) in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) (PoCs)\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance\n\nFinding and Exploiting Bugs in Game Engines:\ud83d\ude01\n1. Finding vulnerabilities in Valve\u2019s \"Steam Sockets\" (CVE-2020-6016, CVE-2020-6017, CVE-2020-6018, CVE-2020-6019)\nhttps://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/\n\n2. Exploiting a WebKit 0-day in PlayStation 4\nhttps://www.synacktiv.com/publications/this-is-for-the-pwners-exploiting-a-webkit-0-day-in-playstation-4.html", "creation_timestamp": "2026-09-01T17:01:05.968080Z"}, {"uuid": "5955e4a0-af07-4187-8ed7-9025bd619907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13509", "type": "seen", "source": "https://t.me/cissp/2115", "content": "Multiple vulnerabilities in NZXT computer monitoring software (PoCs)\ud83d\ude01\nCVE-2020-13509 - CVE-2020-13511:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1110\nCVE-2020-13512 - CVE-2020-13514:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1111\nCVE-2020-13515:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1112\nCVE-2020-13516:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1113\nCVE-2020-13517:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1114\nCVE-2020-13518:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1115\nCVE-2020-13519:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1116\n\nMultiple critical vulnerabilities\ud83d\ude01 (CVE-2020-8461, CVE-2020-8462, CVE-2020-8463, CVE-2020-8464, CVE-2020-8465, CVE-2020-8466) in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) (PoCs)\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance\n\nFinding and Exploiting Bugs in Game Engines:\ud83d\ude01\n1. Finding vulnerabilities in Valve\u2019s \"Steam Sockets\" (CVE-2020-6016, CVE-2020-6017, CVE-2020-6018, CVE-2020-6019)\nhttps://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/\n\n2. Exploiting a WebKit 0-day in PlayStation 4\nhttps://www.synacktiv.com/publications/this-is-for-the-pwners-exploiting-a-webkit-0-day-in-playstation-4.html", "creation_timestamp": "2026-09-02T01:04:55.830797Z"}]}