{"vulnerability": "CVE-2020-35717", "sightings": [{"uuid": "9669ef3e-08ee-49fd-b044-5bceef7579e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "seen", "source": "https://t.me/cibsecurity/21507", "content": "\u203c CVE-2020-35717 \u203c\n\nzonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-01T12:32:39.000000Z"}, {"uuid": "a302e883-f634-441f-9af6-ef2d4a8681a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2444", "content": "#exploit\nCVE-2020-35717:\nRCE Through Cross-Site Scripting In Electron Apps\nhttps://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637", "creation_timestamp": "2024-09-16T16:07:25.000000Z"}, {"uuid": "f8f664ae-af34-49fb-a3bd-cf40f170aa1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "seen", "source": "https://t.me/cissp/2027", "content": "1. Planex CS-QP50F-ING2 (Smart Camera) Remote Configuration Disclosure (PoC)\nhttps://packetstormsecurity.com/files/160805/cs-qp50f_tester.pl.txt\n\n2. Decrypting Symmetric Encryption\nhttps://medium.com/bugbountywriteup/understanding-and-breaking-symmetric-encryption-e83efacd5619\n\n3. Frida Android utilities\nhttps://github.com/Hamz-a/frida-android-helper#android-proxy-via-reverse-tethering-configuration\n\n4. Getting root on a 4G LTE mobile hotspot\nhttps://alex.studer.dev/2021/01/04/mw41-1\n\n5. Perform Keystroke Injection Attacks Over Wi-Fi with Your Smartphone\nhttps://null-byte.wonderhowto.com/how-to/perform-keystroke-injection-attacks-over-wi-fi-with-your-smartphone-0236799\n\n6. Hacking with Haskell - Using Haskell to Develop Offensive Tools\nhttps://0xdab0.medium.com/hacking-with-haskell-28887c1f2d06\n\nCVE-2020-13573:\nRockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1184\n\nCVE-2020-35717:\nRemote Code Execution Through Cross-Site Scripting In Electron Apps (PoC)\nhttps://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637", "creation_timestamp": "2026-09-01T17:01:08.123247Z"}, {"uuid": "5711f002-5b6e-4609-8359-2f949e3068be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "seen", "source": "https://t.me/cissp/2027", "content": "1. Planex CS-QP50F-ING2 (Smart Camera) Remote Configuration Disclosure (PoC)\nhttps://packetstormsecurity.com/files/160805/cs-qp50f_tester.pl.txt\n\n2. Decrypting Symmetric Encryption\nhttps://medium.com/bugbountywriteup/understanding-and-breaking-symmetric-encryption-e83efacd5619\n\n3. Frida Android utilities\nhttps://github.com/Hamz-a/frida-android-helper#android-proxy-via-reverse-tethering-configuration\n\n4. Getting root on a 4G LTE mobile hotspot\nhttps://alex.studer.dev/2021/01/04/mw41-1\n\n5. Perform Keystroke Injection Attacks Over Wi-Fi with Your Smartphone\nhttps://null-byte.wonderhowto.com/how-to/perform-keystroke-injection-attacks-over-wi-fi-with-your-smartphone-0236799\n\n6. Hacking with Haskell - Using Haskell to Develop Offensive Tools\nhttps://0xdab0.medium.com/hacking-with-haskell-28887c1f2d06\n\nCVE-2020-13573:\nRockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1184\n\nCVE-2020-35717:\nRemote Code Execution Through Cross-Site Scripting In Electron Apps (PoC)\nhttps://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637", "creation_timestamp": "2026-09-02T01:04:57.855617Z"}, {"uuid": "9d7c0677-9025-40ce-954d-8591ab340a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2027", "content": "1. Planex CS-QP50F-ING2 (Smart Camera) Remote Configuration Disclosure (PoC)\nhttps://packetstormsecurity.com/files/160805/cs-qp50f_tester.pl.txt\n\n2. Decrypting Symmetric Encryption\nhttps://medium.com/bugbountywriteup/understanding-and-breaking-symmetric-encryption-e83efacd5619\n\n3. Frida Android utilities\nhttps://github.com/Hamz-a/frida-android-helper#android-proxy-via-reverse-tethering-configuration\n\n4. Getting root on a 4G LTE mobile hotspot\nhttps://alex.studer.dev/2021/01/04/mw41-1\n\n5. Perform Keystroke Injection Attacks Over Wi-Fi with Your Smartphone\nhttps://null-byte.wonderhowto.com/how-to/perform-keystroke-injection-attacks-over-wi-fi-with-your-smartphone-0236799\n\n6. Hacking with Haskell - Using Haskell to Develop Offensive Tools\nhttps://0xdab0.medium.com/hacking-with-haskell-28887c1f2d06\n\nCVE-2020-13573:\nRockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1184\n\nCVE-2020-35717:\nRemote Code Execution Through Cross-Site Scripting In Electron Apps (PoC)\nhttps://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637", "creation_timestamp": "2026-09-11T21:00:04.017471Z"}, {"uuid": "2b62c778-e2d6-4958-b50a-b51e85761a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35717", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2027", "content": "1. Planex CS-QP50F-ING2 (Smart Camera) Remote Configuration Disclosure (PoC)\nhttps://packetstormsecurity.com/files/160805/cs-qp50f_tester.pl.txt\n\n2. Decrypting Symmetric Encryption\nhttps://medium.com/bugbountywriteup/understanding-and-breaking-symmetric-encryption-e83efacd5619\n\n3. Frida Android utilities\nhttps://github.com/Hamz-a/frida-android-helper#android-proxy-via-reverse-tethering-configuration\n\n4. Getting root on a 4G LTE mobile hotspot\nhttps://alex.studer.dev/2021/01/04/mw41-1\n\n5. Perform Keystroke Injection Attacks Over Wi-Fi with Your Smartphone\nhttps://null-byte.wonderhowto.com/how-to/perform-keystroke-injection-attacks-over-wi-fi-with-your-smartphone-0236799\n\n6. Hacking with Haskell - Using Haskell to Develop Offensive Tools\nhttps://0xdab0.medium.com/hacking-with-haskell-28887c1f2d06\n\nCVE-2020-13573:\nRockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1184\n\nCVE-2020-35717:\nRemote Code Execution Through Cross-Site Scripting In Electron Apps (PoC)\nhttps://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637", "creation_timestamp": "2026-09-12T00:00:12.825765Z"}]}