{"vulnerability": "cve-2018-8420", "sightings": [{"uuid": "5729f468-6c2d-4839-9b31-908d0e6165fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "published-proof-of-concept", "source": "https://t.me/windowshackinglibrary/201", "content": "CVE-2018-8420 - Microsoft XML Core Services MSXML RCE through web browser PoC\n\nhttps://github.com/Theropord/CVE-2018-8420\n\n@WindowsHackingLibrary", "creation_timestamp": "2018-09-12T13:57:05.000000Z"}, {"uuid": "57295115-e4f9-4681-ae5a-de3adfbba624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/109", "content": "#exploit\n1. CVE-2018-5407:\nPortSmash microarchitecture attack\nhttps://github.com/bbbrumley/portsmash\n\n2. CVE-2018-8420:\nMS XML Core Services RCE through web browser\nhttps://github.com/Theropord/CVE-2018-8420\n\n3. Sophos HitmanPro.Alert memory disclosure and code execution vulnerabilities (PoC for CVE-2018-3970, CVE-2018-3971)\nhttps://blog.talosintelligence.com/2018/10/vulnerability-spotlight-talos-2018.html", "creation_timestamp": "2024-10-08T14:32:29.000000Z"}, {"uuid": "f8c78342-1a15-48d9-bc0b-7fb0835f82fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "published-proof-of-concept", "source": "Telegram/2wpHVfiuk4m62_3mxc7KHFyzig96FNvmcEhGvGvAZ76o4jUG", "content": "", "creation_timestamp": "2026-07-17T07:00:04.505250Z"}, {"uuid": "c015cb2b-6e81-4528-aabe-660b3be99383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "seen", "source": "Telegram/QvNITmlzf2xadUyYSXgilqfn8iDNHE8zc_kre-0GUnKP4jV5", "content": "", "creation_timestamp": "2026-07-17T07:00:04.547367Z"}, {"uuid": "439e4a67-9cec-436f-9e15-999bf244500e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "published-proof-of-concept", "source": "Telegram/2wpHVfiuk4m62_3mxc7KHFyzig96FNvmcEhGvGvAZ76o4jUG", "content": "", "creation_timestamp": "2026-07-18T00:00:37.320352Z"}, {"uuid": "3a21f10f-1ee1-41a5-b8f7-a30c9a648ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8420", "type": "seen", "source": "Telegram/QvNITmlzf2xadUyYSXgilqfn8iDNHE8zc_kre-0GUnKP4jV5", "content": "", "creation_timestamp": "2026-07-18T00:00:37.353465Z"}]}