{"vulnerability": "cve-2020-1034", "sightings": [{"uuid": "91e4eab8-4700-4423-98c4-53afc7caed1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "published-proof-of-concept", "source": "Telegram/4SXK41AuNvfHoBMLIoopOBVAez5UcGp1ZVv-o0wdupqYUOI", "content": "", "creation_timestamp": "2020-10-20T14:27:18.000000Z"}, {"uuid": "87a0032e-ee29-4236-b986-22129ed8a1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2528", "content": "#Kernel_Security\nA Series of Windows Kernel Bugs in a Single Function (CVE-2020-1033, CVE-2020-1034, CVE-2021-1662, CVE-2021-1682)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=4\n// ETW is very vulnerable part of Windows NT Kernel", "creation_timestamp": "2024-10-09T19:57:23.000000Z"}, {"uuid": "8ff13d50-9df4-409f-a8bd-e05eccece7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2901", "content": "CVE-2020-1034 - Exploiting a \"Simple\" Vulnerability\nPart 1:  https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less\nPart 2:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak\nPart 3:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder\n]-> PoC demonstrating the use of cve-2020-1034 for privilege escalation:\nhttps://github.com/yardenshafir/CVE-2020-1034", "creation_timestamp": "2021-03-13T12:57:01.000000Z"}, {"uuid": "6df08ec4-bef1-44e1-b9fd-8d7e8caa3d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2164", "content": "#exploit\nCVE-2020-1034:\nWindows 10 2004, build 19041.488 - Privilege Escalation (input validation bug in\u00a0EtwpNotifyGuid).\n]-> Research + PoC: https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less/\n]-> PoC: https://github.com/yardenshafir/CVE-2020-1034", "creation_timestamp": "2024-09-10T16:38:59.000000Z"}, {"uuid": "0e738723-cd20-4463-ba0f-a22f2153834c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "seen", "source": "https://t.me/cissp/2173", "content": "Exfiltrate NTLM Hashes with PowerShell Profiles\nhttps://www.varonis.com/blog/exfiltrate-ntlm-hashes/?utm_content=151682597&utm_medium=social&utm_source=twitter&hss_channel=tw-21672993\n\nA Series of Windows Kernel Bugs in a Single Function (CVE-2020-1033, CVE-2020-1034, CVE-2021-1662, CVE-2021-1682)\n// ETW is very vulnerable part of Windows NT Kernel...\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=4\n\nLinux Kernel (5.4.81) - Memory Management Module Source Code Analysis\nhttps://paper.seebug.org/1458\n\nCVE-2020-5144:\nSonicWall Global VPN New Elevation of Privileges Vulnerability (PoC)\nhttps://cymptom.com/cve-2020-5144-sonicwall-global-vpn-new-elevation-of-privileges-vulnerability/2021/\n\n1. Oski Stealer: An In-depth Analysis of the Popular Credential Stealer\nhttps://www.cyberark.com/resources/threat-research-blog/meet-oski-stealer-an-in-depth-analysis-of-the-popular-credential-stealer\n2. Doc/RTF Malicious Document (with no payload)\nhttps://isc.sans.edu/forums/diary/Doc+RTF+Malicious+Document/26996", "creation_timestamp": "2026-09-01T17:01:05.279302Z"}, {"uuid": "1c9a6695-932c-4c2e-98d9-172c53dbee53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "seen", "source": "https://t.me/cissp/2509", "content": "CVE-2020-1034 - Exploiting a \"Simple\" Vulnerability\nPart 1:  https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less\n\nPart 2:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak\n\nPart 3:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder\n]-> PoC demonstrating the use of cve-2020-1034 for privilege escalation:\nhttps://github.com/yardenshafir/CVE-2020-1034", "creation_timestamp": "2026-09-01T17:00:59.979037Z"}, {"uuid": "d89bb9fc-6e17-4cc4-b41a-b7c68f1af44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1034", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2509", "content": "CVE-2020-1034 - Exploiting a \"Simple\" Vulnerability\nPart 1:  https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less\n\nPart 2:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak\n\nPart 3:  https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder\n]-> PoC demonstrating the use of cve-2020-1034 for privilege escalation:\nhttps://github.com/yardenshafir/CVE-2020-1034", "creation_timestamp": "2026-09-11T17:00:03.633852Z"}]}