{"vulnerability": "cve-2020-1352", "sightings": [{"uuid": "58493ca6-c6f2-4e0a-9cfc-6cd59252887e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13527", "type": "seen", "source": "https://t.me/cibsecurity/21045", "content": "\u203c CVE-2020-13527 \u203c\n\nAn authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-18T02:43:26.000000Z"}, {"uuid": "694db4ee-5bbc-4198-b15f-67d7d6bdff37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13528", "type": "seen", "source": "https://t.me/cibsecurity/21030", "content": "\u203c CVE-2020-13528 \u203c\n\nAn information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-18T02:43:08.000000Z"}, {"uuid": "ec141710-389b-45f9-b447-74bc62086ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13524", "type": "seen", "source": "https://t.me/cibsecurity/17102", "content": "\u203c CVE-2020-13524 \u203c\n\nAn out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-03T20:26:15.000000Z"}, {"uuid": "e9d1d221-3525-4362-9690-4dc90c6a2e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19716", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T05:25:14.000000Z"}, {"uuid": "515ef1d9-8527-4740-83ae-86a7d9dcc28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19656", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T02:37:34.000000Z"}, {"uuid": "3f512406-b12f-45cc-ac40-5cc0f985ae43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19756", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T07:25:25.000000Z"}, {"uuid": "af611d8b-770a-4059-938e-b5147b210374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19736", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T06:25:17.000000Z"}, {"uuid": "ea2a35dd-ac24-4a03-9a0c-b517d2b41462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19696", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T04:25:18.000000Z"}, {"uuid": "a7664619-2ebf-495c-84e7-c929635f4e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19676", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T03:25:24.000000Z"}, {"uuid": "3d4788bd-a4af-4805-b83f-1cc6f17d9d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13526", "type": "seen", "source": "https://t.me/cibsecurity/19636", "content": "\u203c CVE-2020-13526 \u203c\n\nThe \u00e2\u20ac˜sort\u00e2\u20ac\u2122 parameter in the download page clientSetupAjax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T02:34:30.000000Z"}, {"uuid": "42a12a12-cd35-4660-9e05-33ae722af97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13525", "type": "seen", "source": "https://t.me/cibsecurity/17107", "content": "\u203c CVE-2020-13525 \u203c\n\nThe sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-03T20:26:20.000000Z"}, {"uuid": "60db802e-d570-4cd2-8db4-913ad7b965e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13523", "type": "seen", "source": "https://t.me/cibsecurity/13873", "content": "ATENTION\u203c New - CVE-2020-13523\n\nAn exploitable information disclosure vulnerability exists in SoftPerfect\u00e2\u20ac\u2122s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-08-04T22:55:18.000000Z"}, {"uuid": "0231dc16-d36f-4186-88d9-3a5b25120fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13522", "type": "seen", "source": "https://t.me/cibsecurity/13876", "content": "ATENTION\u203c New - CVE-2020-13522\n\nAn exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-08-05T00:55:17.000000Z"}, {"uuid": "b243eec7-7b90-4aa5-95b4-d58d43c3565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13529", "type": "seen", "source": "https://t.me/hacking_Attack/49649", "content": "Kali Linux Tutorials\nMaster_Librarian : A Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities\n\nMaster_Librarian is a simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities.\n\nTo install requirements:\n\n$ sudo python3 -m pip install -r requirements.txt\n\nOverview:\n\n$ python3 master_librarian.py -h\nMaster librarian v0.3\nTool to search public vulnerabilities on local libraries\nby CoolerVoid\nExample:\n$ python3 master_librarian.py -t csv\n$ python3 master_librarian.py -t txt -l 3\nusage: master_librarian.py [-h] -t TYPES [-l LIMIT]\noptional arguments:\n-h, \u2013help show this help message and exit\n-t TYPES, \u2013type TYPES\nName of output type for logs(txt or csv)\n-l LIMIT, \u2013limit LIMIT\nLimit CVEs per pages in nvd NIST search(default is 3)\n\nExample:\n\n$ python3 master_librarian.py -t txt\n\noutput\n\nMaster librarian v0.3\nTool to search public vulnerabilities on local libraries\nby CoolerVoid\nExample:\n$ python3 master_librarian.py -t csv\n$ python3 master_librarian.py -t txt -l 3\nMaster librarian v0.3\nTool to search public vulnerabilities on local libraries\nby CoolerVoid\nSearch pitfalls in operational system local packages\nxres 1.2.0\ncairo-ps 1.16.0\nxf86vidmodeproto 2.3.1\nlibcrypto 1.1.1f\ndamageproto 1.2.1\nlibffi 3.3\nxfixes 5.0.3\nInteger overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-7944\n7.5 HIGH\nsystem.web.extensions.design_1.0 1.0.61025.0\nkbproto 1.0.7\ngio-unix-2.0 2.64.6\ngdk-x11-2.0 2.24.32\nsqlite3 3.31.1\ncairo-png 1.16.0\nlibpcre2-posix 10.34\nwcf 6.8.0.105\ndmxproto 2.3.1\ncairo-script 1.16.0\nxext 1.3.4\nx11 1.6.9\nsystem.web.mvc 1.0.0.0\nmono-cairo 6.8.0.105\ncecil 6.8.0.105\nudev 245\nThe default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.\nhttps://nvd.nist.gov/vuln/detail/CVE-2011-0640\n6.9 MEDIUM\nplymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-4176\n4.0 MEDIUM\nxkeyboard-config 2.29\nbash-completion 2.10\nyelp-xsl 3.36.0\nxdamage 1.1.5\nlibgdiplus 6.0.4\nicu-uc 66.1\nxcomposite 0.4.5\nharfbuzz 2.6.4\npixman-1 0.38.4\npthread-stubs 0.4\nsystemd 245\nAn exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-13529\n2.9 LOW\nsystemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-13776\n6.2 MEDIUM\nA heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-1712\n4.6 MEDIUM\nexpat 2.2.9\npangocairo 1.44.7\nxdmcp 1.1.3\nlibpcreposix [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:46.417068Z"}, {"uuid": "47f288dc-10e1-4267-816e-49be80f46a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13522", "type": "seen", "source": "https://t.me/cissp/1065", "content": "Two vulnerabilities in SoftPerfect RAM Disk (CVE-2020-13522/13523):\n\nAn exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability.\nTested Versions\nSoftPerfect RAM Disk 4.1\nProduct URLs\nhttps://www.softperfect.com/products/ramdisk/\nCVSSv3 Score\n8.8 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\nCWE\nCWE-269 - Improper Privilege Management\nDetails\nSoftPerfect RAM Disk is a high-performance RAM disk application that allows the user to store a disk from their computer on the device\u2019s space.\n\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1121\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1122", "creation_timestamp": "2026-09-01T17:01:14.755320Z"}, {"uuid": "4ba243e7-6716-49b4-82eb-3c3c81cd4c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13529", "type": "seen", "source": "https://t.me/hacking_Attack/45721", "content": "KitPloit - PenTest Tools!\nMaster_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjsrmhQfDtTdfBPNa6qZgsSf3u30VLPYC3uKiVcyq9ZGHj16L1OT3WrO1HfwDyWXqnHKHPKJbSTz2Whniw57u-WtS5y_mcQsWyfzNYadEoNL2ZgYGTEeORZsjTrJzIDyx8ZUunfcL0CntifHoVg48hyGjYPR8doMybpPRTOwLUqmaUvooKWE3KXcFIO=w640-h480 A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities.\nTo install requirements: $ sudo python3 -m pip install -r requirements.txt Overview:\n\nvulnerabilities on local libraries  by CoolerVoid    Example:    $ python3 master_librarian.py -t csv   $ python3 master_librarian.py -t txt -l 3    usage: master_librarian.py [-h] -t TYPES [-l LIMIT]    optional arguments:    -h, --help            show this help message and exit    -t TYPES, --type TYPES                          Name of output type for logs(txt or csv)    -l LIMIT, --limit LIMIT                          Limit CVEs per pages in nvd NIST search(default is 3)  \">$ python3 master_librarian.py -h\nMaster librarian v0.3 \nTool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nExample: \n$ python3 master_librarian.py -t csv\n$ python3 master_librarian.py -t txt -l 3\n\nusage: master_librarian.py [-h] -t TYPES [-l LIMIT]\n\noptional arguments:\n-h, --help            show this help message and exit\n-t TYPES, --type TYPES\nName of output type for logs(txt or csv)\n-l LIMIT, --limit LIMIT\nLimit CVEs per pages in nvd NIST search(default is 3) \n\nExample: $ python3 master_librarian.py -t txt output\n\nvulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.    https://nvd.nist.gov/vuln/detail/CVE-2020-13529    2.9 LOW      systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.    https://nvd.nist.gov/vuln/detail/CVE-2020-13776    6.2 MEDIUM      A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.    https://nvd.nist.gov/vuln/detail/CVE-2020-1712    4.6 MEDIUM    expat 2.2.9  pangocairo 1.44.7  xdmcp 1.1.3  libpcreposix 8.39  ruby-2.7 2.7.0  glib-2.0 2.64.6  gnome-system-tools 3.0.0  xinerama 1.1.4  nunit 2.6.3  gmp 6.2.0  libevent 2.1.11-stable  xbuild12 12.0  xorg-sgml-doctools 1.11  presentproto 1.2  gdk-pixbuf-2.0 2.40.0  inputproto 2.3.2  libssl 1.1.1f  xcb-shm 1.14  gdk-2.0 2.24.32  libpng16 1.6.37  bigreqsproto 1.1.2  icu-io 66.1  xextproto 7.3.0  libthai 0.1.28  libbsd-overlay 0.10.0  mount 2.34.0  gio-2.0 2.64.6  adwaita-icon-theme 3.36.1  fontconfig 2.13.1  xrandr 1.5.2  monosgen-2 6.8.0.105  mono 6.8.0.105  xf86dgaproto 2.1  dri3proto 1.2  libpcre 8.39  pangoxft 1.44.7  blkid 2.34.0  libsepol 3.0  libevent_openssl 2.1.11-stable  uuid 2.34.0  gmodule-2.0 2.64.6  graphite2 3.0.1  libfl 2.6.4  zlib 1.2.11  cairo-pdf 1.16.0  ruby 2.7.0    Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource co[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:51.176061Z"}, {"uuid": "9a1634b9-91cb-4cdb-bfab-59bb8f51d1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13529", "type": "seen", "source": "https://t.me/hacking_Attack/45702", "content": "Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nExample: \n $ python3 master_librarian.py -t csv\n $ python3 master_librarian.py -t txt -l 3\n\nMaster librarian v0.3\n Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nSearch pitfalls in operational system local packages\n\nxres 1.2.0\ncairo-ps 1.16.0\nxf86vidmodeproto 2.3.1\nlibcrypto 1.1.1f\ndamageproto 1.2.1\nlibffi 3.3\nxfixes 5.0.3\n  Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-7944\n  7.5 HIGH\n\nsystem.web.extensions.design_1.0 1.0.61025.0\nkbproto 1.0.7\ngio-unix-2.0 2.64.6\ngdk-x11-2.0 2.24.32\nsqlite3 3.31.1\ncairo-png 1.16.0\nlib   pcre2-posix 10.34\nwcf 6.8.0.105\ndmxproto 2.3.1\ncairo-script 1.16.0\nxext 1.3.4\nx11 1.6.9\nsystem.web.mvc 1.0.0.0\nmono-cairo 6.8.0.105\ncecil 6.8.0.105\nudev 245\n  The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.\n  https://nvd.nist.gov/vuln/detail/CVE-2011-0640\n  6.9 MEDIUM\n\n  plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.\n  https://nvd.nist.gov/vuln/detail/CVE-2010-4176\n  4.0 MEDIUM\n\nxkeyboard-config 2.29\nbash-completion 2.10\nyelp-xsl 3.36.0   \nxdamage 1.1.5\nlibgdiplus 6.0.4\nicu-uc 66.1\nxcomposite 0.4.5\nharfbuzz 2.6.4\npixman-1 0.38.4\npthread-stubs 0.4\nsystemd 245\n  An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13529\n  2.9 LOW\n\n  systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13776\n  6.2 MEDIUM\n\n  A heap use-after-free vulnerability was found in systemd before version v245-rc1, where    asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-1712\n  4.6 MEDIUM\n\nexpat 2.2.9\npangocairo 1.44.7\nxdmcp 1.1.3\nlibpcreposix 8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86d   gaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:51.652454Z"}, {"uuid": "de802f21-8465-476f-aaa3-f1db71db9977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13529", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/45702", "content": "Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nExample: \n $ python3 master_librarian.py -t csv\n $ python3 master_librarian.py -t txt -l 3\n\nMaster librarian v0.3\n Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nSearch pitfalls in operational system local packages\n\nxres 1.2.0\ncairo-ps 1.16.0\nxf86vidmodeproto 2.3.1\nlibcrypto 1.1.1f\ndamageproto 1.2.1\nlibffi 3.3\nxfixes 5.0.3\n  Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-7944\n  7.5 HIGH\n\nsystem.web.extensions.design_1.0 1.0.61025.0\nkbproto 1.0.7\ngio-unix-2.0 2.64.6\ngdk-x11-2.0 2.24.32\nsqlite3 3.31.1\ncairo-png 1.16.0\nlib   pcre2-posix 10.34\nwcf 6.8.0.105\ndmxproto 2.3.1\ncairo-script 1.16.0\nxext 1.3.4\nx11 1.6.9\nsystem.web.mvc 1.0.0.0\nmono-cairo 6.8.0.105\ncecil 6.8.0.105\nudev 245\n  The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.\n  https://nvd.nist.gov/vuln/detail/CVE-2011-0640\n  6.9 MEDIUM\n\n  plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.\n  https://nvd.nist.gov/vuln/detail/CVE-2010-4176\n  4.0 MEDIUM\n\nxkeyboard-config 2.29\nbash-completion 2.10\nyelp-xsl 3.36.0   \nxdamage 1.1.5\nlibgdiplus 6.0.4\nicu-uc 66.1\nxcomposite 0.4.5\nharfbuzz 2.6.4\npixman-1 0.38.4\npthread-stubs 0.4\nsystemd 245\n  An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13529\n  2.9 LOW\n\n  systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13776\n  6.2 MEDIUM\n\n  A heap use-after-free vulnerability was found in systemd before version v245-rc1, where    asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-1712\n  4.6 MEDIUM\n\nexpat 2.2.9\npangocairo 1.44.7\nxdmcp 1.1.3\nlibpcreposix 8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86d   gaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T05:00:06.575783Z"}, {"uuid": "2f35f4c9-37a0-4235-a369-a45df61b6a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13522", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1065", "content": "Two vulnerabilities in SoftPerfect RAM Disk (CVE-2020-13522/13523):\n\nAn exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability.\nTested Versions\nSoftPerfect RAM Disk 4.1\nProduct URLs\nhttps://www.softperfect.com/products/ramdisk/\nCVSSv3 Score\n8.8 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\nCWE\nCWE-269 - Improper Privilege Management\nDetails\nSoftPerfect RAM Disk is a high-performance RAM disk application that allows the user to store a disk from their computer on the device\u2019s space.\n\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1121\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1122", "creation_timestamp": "2026-09-12T02:00:04.719909Z"}]}