{"vulnerability": "CVE-2020-1456", "sightings": [{"uuid": "3a776455-04b3-449a-b981-df5447500a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1456", "type": "seen", "source": "Telegram/Km9gcRJ-PStd5h4tHMmt4rQnkSox9bnmGNHQu_1h5QIrVDU9", "content": "", "creation_timestamp": "2025-03-02T11:46:28.000000Z"}, {"uuid": "e6fad434-2961-4192-84a0-0e505d1191a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1456", "type": "seen", "source": "Telegram/ddGcu0PbjdPFti98YC4iBSnigFXoQU08u0uyhA05vZPyYFv5", "content": "", "creation_timestamp": "2025-03-02T11:46:28.000000Z"}, {"uuid": "3ecd3992-f746-4921-b103-a7b33e497a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1456", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2518", "content": "#exploit\nCVE-2020-1456:\nUnvalidated User Input in MS SharePoint 2019\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage", "creation_timestamp": "2024-10-09T19:59:05.000000Z"}, {"uuid": "3ff9f227-7d62-4a55-ad83-4d11847e036b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1456", "type": "seen", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-01T17:01:05.536209Z"}, {"uuid": "f20e639c-5b85-4372-ac4d-f42009c11266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1456", "type": "seen", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-02T01:04:55.307416Z"}]}