{"vulnerability": "CVE-2020-6105", "sightings": [{"uuid": "897c0733-810a-4dfb-804f-7b712f1ad836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-6105", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1925", "content": "Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html", "creation_timestamp": "2022-06-08T21:16:15.000000Z"}, {"uuid": "60bde678-11ec-4d28-a299-9ba75124d77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-6105", "type": "seen", "source": "https://t.me/cibsecurity/15295", "content": "\u203c CVE-2020-6105 \u203c\n\nAn exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-15T18:40:44.000000Z"}, {"uuid": "0d0ddafa-0b8c-4ab3-b9b3-356f78c75009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-6105", "type": "seen", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-01T17:01:08.785503Z"}, {"uuid": "2909d5ad-ec7c-4101-b7d9-5b2d5a932fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-6105", "type": "seen", "source": "https://t.me/cissp/1991", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "creation_timestamp": "2026-09-02T01:04:58.638246Z"}]}