{"vulnerability": "CVE-2020-13569", "sightings": [{"uuid": "76be98b3-a51f-4092-9bc8-b169e7fa79e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "seen", "source": "https://t.me/cibsecurity/22786", "content": "\u203c CVE-2020-13569 \u203c\n\nA cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce). A specially crafted HTTP request can lead to the execution of arbitrary requests in the context of the victim. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-28T16:38:27.000000Z"}, {"uuid": "b410ed6a-06bc-476d-8bcd-094d8237c9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2599", "content": "Multiple vulnerabilities in phpGACL class (CVE-2020-13562 - CVE-2020-13564, CVE-2020-13565, CVE-2020-13569, CVE-2020-13566 - CVE-2020-13568) (PoC)\nhttps://blog.talosintelligence.com/2021/01/vuln-spotlight-php-gacl-openemr.html", "creation_timestamp": "2022-06-07T18:49:49.000000Z"}, {"uuid": "b9009f51-8eed-4989-ae38-288687aa6d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "seen", "source": "https://t.me/cissp/2251", "content": "Details + PoC for a couple of FreeBSD kernel [1-day]\ud83d\ude00\ninfo leaks (CVE-2020-25578, CVE-2020-25579)\nhttps://github.com/elttam/advisories/tree/master/CVE-2020-25578%20CVE-2020-25579\n\n1. TransitSimplified.exe Analysis Paper\nhttps://preview.redd.it/gg1582ecf4e61.png?width=1326&format=png&auto=webp&s=37201c1ce8063da9ab7b4da75ce7b92bd1177c77\n2. \"BrickerBot\" Results In Permanent DoS (PDoS) https://www.radware.com/security/ddos-threats-attacks/brickerbot-pdos-permanent-denial-of-service\n\n1. From N-day exploit to Kerberos EoP in Linux environments\nhttps://www.blackarrow.net/from-n-day-exploit-to-kerberos-eop-in-linux-environments\n// This article describes the analysis and exploiting of a vulnerability (CVE-2018-1685) that could allow an attacker to read arbitrary files, but of which no public details are known\n2. Unauthorized Access to OData Entities\nhttps://medium.com/bugbountywriteup/unauthorized-access-to-odata-entities-2k-bounty-from-microsoft-e070b2ef88c2\n\nMultiple vulnerabilities in phpGACL class (CVE-2020-13562 - CVE-2020-13564, CVE-2020-13565, CVE-2020-13569, CVE-2020-13566 - CVE-2020-13568) (PoC)\nhttps://blog.talosintelligence.com/2021/01/vuln-spotlight-php-gacl-openemr.html?m=1\n\n1. Reverse Engineering iMessage\nhttps://www.nowsecure.com/blog/2021/01/27/reverse-engineering-imessage-leveraging-the-hardware-to-protect-the-software\n2. The tale of a bug affecting a NAS Western Digital My Cloud Pro Series PR4100\nhttps://www.crowdstrike.com/blog/pwn2own-tale-of-a-bug-found-and-lost-again", "creation_timestamp": "2026-09-01T17:01:04.410084Z"}, {"uuid": "82391d9c-99c2-46c0-bca8-e5cda4872a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "seen", "source": "https://t.me/cissp/2251", "content": "Details + PoC for a couple of FreeBSD kernel [1-day]\ud83d\ude00\ninfo leaks (CVE-2020-25578, CVE-2020-25579)\nhttps://github.com/elttam/advisories/tree/master/CVE-2020-25578%20CVE-2020-25579\n\n1. TransitSimplified.exe Analysis Paper\nhttps://preview.redd.it/gg1582ecf4e61.png?width=1326&format=png&auto=webp&s=37201c1ce8063da9ab7b4da75ce7b92bd1177c77\n2. \"BrickerBot\" Results In Permanent DoS (PDoS) https://www.radware.com/security/ddos-threats-attacks/brickerbot-pdos-permanent-denial-of-service\n\n1. From N-day exploit to Kerberos EoP in Linux environments\nhttps://www.blackarrow.net/from-n-day-exploit-to-kerberos-eop-in-linux-environments\n// This article describes the analysis and exploiting of a vulnerability (CVE-2018-1685) that could allow an attacker to read arbitrary files, but of which no public details are known\n2. Unauthorized Access to OData Entities\nhttps://medium.com/bugbountywriteup/unauthorized-access-to-odata-entities-2k-bounty-from-microsoft-e070b2ef88c2\n\nMultiple vulnerabilities in phpGACL class (CVE-2020-13562 - CVE-2020-13564, CVE-2020-13565, CVE-2020-13569, CVE-2020-13566 - CVE-2020-13568) (PoC)\nhttps://blog.talosintelligence.com/2021/01/vuln-spotlight-php-gacl-openemr.html?m=1\n\n1. Reverse Engineering iMessage\nhttps://www.nowsecure.com/blog/2021/01/27/reverse-engineering-imessage-leveraging-the-hardware-to-protect-the-software\n2. The tale of a bug affecting a NAS Western Digital My Cloud Pro Series PR4100\nhttps://www.crowdstrike.com/blog/pwn2own-tale-of-a-bug-found-and-lost-again", "creation_timestamp": "2026-09-02T01:04:54.253545Z"}, {"uuid": "b32e884f-f404-418d-aee3-5a65d1fdd183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2251", "content": "Details + PoC for a couple of FreeBSD kernel [1-day]\ud83d\ude00\ninfo leaks (CVE-2020-25578, CVE-2020-25579)\nhttps://github.com/elttam/advisories/tree/master/CVE-2020-25578%20CVE-2020-25579\n\n1. TransitSimplified.exe Analysis Paper\nhttps://preview.redd.it/gg1582ecf4e61.png?width=1326&format=png&auto=webp&s=37201c1ce8063da9ab7b4da75ce7b92bd1177c77\n2. \"BrickerBot\" Results In Permanent DoS (PDoS) https://www.radware.com/security/ddos-threats-attacks/brickerbot-pdos-permanent-denial-of-service\n\n1. From N-day exploit to Kerberos EoP in Linux environments\nhttps://www.blackarrow.net/from-n-day-exploit-to-kerberos-eop-in-linux-environments\n// This article describes the analysis and exploiting of a vulnerability (CVE-2018-1685) that could allow an attacker to read arbitrary files, but of which no public details are known\n2. Unauthorized Access to OData Entities\nhttps://medium.com/bugbountywriteup/unauthorized-access-to-odata-entities-2k-bounty-from-microsoft-e070b2ef88c2\n\nMultiple vulnerabilities in phpGACL class (CVE-2020-13562 - CVE-2020-13564, CVE-2020-13565, CVE-2020-13569, CVE-2020-13566 - CVE-2020-13568) (PoC)\nhttps://blog.talosintelligence.com/2021/01/vuln-spotlight-php-gacl-openemr.html?m=1\n\n1. Reverse Engineering iMessage\nhttps://www.nowsecure.com/blog/2021/01/27/reverse-engineering-imessage-leveraging-the-hardware-to-protect-the-software\n2. The tale of a bug affecting a NAS Western Digital My Cloud Pro Series PR4100\nhttps://www.crowdstrike.com/blog/pwn2own-tale-of-a-bug-found-and-lost-again", "creation_timestamp": "2026-09-11T19:00:04.415285Z"}, {"uuid": "ba3f2136-61c5-4cc7-bc79-57925aa80641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13569", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2251", "content": "Details + PoC for a couple of FreeBSD kernel [1-day]\ud83d\ude00\ninfo leaks (CVE-2020-25578, CVE-2020-25579)\nhttps://github.com/elttam/advisories/tree/master/CVE-2020-25578%20CVE-2020-25579\n\n1. TransitSimplified.exe Analysis Paper\nhttps://preview.redd.it/gg1582ecf4e61.png?width=1326&format=png&auto=webp&s=37201c1ce8063da9ab7b4da75ce7b92bd1177c77\n2. \"BrickerBot\" Results In Permanent DoS (PDoS) https://www.radware.com/security/ddos-threats-attacks/brickerbot-pdos-permanent-denial-of-service\n\n1. From N-day exploit to Kerberos EoP in Linux environments\nhttps://www.blackarrow.net/from-n-day-exploit-to-kerberos-eop-in-linux-environments\n// This article describes the analysis and exploiting of a vulnerability (CVE-2018-1685) that could allow an attacker to read arbitrary files, but of which no public details are known\n2. Unauthorized Access to OData Entities\nhttps://medium.com/bugbountywriteup/unauthorized-access-to-odata-entities-2k-bounty-from-microsoft-e070b2ef88c2\n\nMultiple vulnerabilities in phpGACL class (CVE-2020-13562 - CVE-2020-13564, CVE-2020-13565, CVE-2020-13569, CVE-2020-13566 - CVE-2020-13568) (PoC)\nhttps://blog.talosintelligence.com/2021/01/vuln-spotlight-php-gacl-openemr.html?m=1\n\n1. Reverse Engineering iMessage\nhttps://www.nowsecure.com/blog/2021/01/27/reverse-engineering-imessage-leveraging-the-hardware-to-protect-the-software\n2. The tale of a bug affecting a NAS Western Digital My Cloud Pro Series PR4100\nhttps://www.crowdstrike.com/blog/pwn2own-tale-of-a-bug-found-and-lost-again", "creation_timestamp": "2026-09-12T00:00:31.627654Z"}]}