{"vulnerability": "cve-2020-27869", "sightings": [{"uuid": "a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2565", "content": "#Threat_Research\nChaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform", "creation_timestamp": "2021-01-25T11:02:01.000000Z"}, {"uuid": "fd5a71bf-94a5-4f88-9fe4-a293fbed848b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2202", "content": "Chaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform\n\nLocal Privilege Escalation in VMware vRealize Automation (vRA) Guest Agent Service (PoC)\nhttps://posts.specterops.io/local-privilege-escalation-in-vmware-vrealize-automation-vra-guest-agent-service-a83fbdce1129\n\nLearning Linux Kernel Exploitation\nhttps://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1\n]-> The full\u00a0exploitation script:\nhttps://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/ret2usr.c\n]-> An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier:\nhttps://www.zerodayinitiative.com/blog/2021/1/18/zdi-20-1440-an-incorrect-calculation-bug-in-the-linux-kernel-ebpf-verifier\n\n1. Scripts to test if clients or access points are affected by the KRACK attack against WPA2\nhttps://github.com/vanhoefm/krackattacks-scripts\n2. Threat Hunting tool for windows event logs which mindset to provide detect APT movements hidden\nhttps://github.com/ahmedkhlief/APT-Hunter\n\n1. Malicious Shell Script Steals Cloud Credentials\nhttps://www.trendmicro.com/en_ca/research/21/a/malicious-shell-script-steals-cloud-credentials.html\n2. Another File Extension to Block: JNLP\nhttps://isc.sans.edu/forums/diary/Another+File+Extension+to+Block+in+your+MTA+jnlp/27018\n3. Introduction to Ghidra Scripting for Embedded ELFs/UPX\nhttps://www.archcloudlabs.com/projects/ghidra_scripting_01\n]-> Collection of ghidra scripts used in malware analysis:\nhttps://github.com/archcloudlabs/ghidra_scripts", "creation_timestamp": "2026-09-01T17:01:02.033789Z"}, {"uuid": "9338df7f-4e71-4353-9d62-81f4e652684b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2202", "content": "Chaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform\n\nLocal Privilege Escalation in VMware vRealize Automation (vRA) Guest Agent Service (PoC)\nhttps://posts.specterops.io/local-privilege-escalation-in-vmware-vrealize-automation-vra-guest-agent-service-a83fbdce1129\n\nLearning Linux Kernel Exploitation\nhttps://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1\n]-> The full\u00a0exploitation script:\nhttps://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/ret2usr.c\n]-> An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier:\nhttps://www.zerodayinitiative.com/blog/2021/1/18/zdi-20-1440-an-incorrect-calculation-bug-in-the-linux-kernel-ebpf-verifier\n\n1. Scripts to test if clients or access points are affected by the KRACK attack against WPA2\nhttps://github.com/vanhoefm/krackattacks-scripts\n2. Threat Hunting tool for windows event logs which mindset to provide detect APT movements hidden\nhttps://github.com/ahmedkhlief/APT-Hunter\n\n1. Malicious Shell Script Steals Cloud Credentials\nhttps://www.trendmicro.com/en_ca/research/21/a/malicious-shell-script-steals-cloud-credentials.html\n2. Another File Extension to Block: JNLP\nhttps://isc.sans.edu/forums/diary/Another+File+Extension+to+Block+in+your+MTA+jnlp/27018\n3. Introduction to Ghidra Scripting for Embedded ELFs/UPX\nhttps://www.archcloudlabs.com/projects/ghidra_scripting_01\n]-> Collection of ghidra scripts used in malware analysis:\nhttps://github.com/archcloudlabs/ghidra_scripts", "creation_timestamp": "2026-09-02T01:04:52.170860Z"}]}