{"vulnerability": "cve-2020-2801", "sightings": [{"uuid": "1946d72b-06a2-458d-8bd5-957ac319adfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28017", "type": "seen", "source": "https://t.me/cKure/5153", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 CVE-2020-28017: An integer overflow in receive_add_recipient() has been found in Exim before version 4.94.2.\n\nhttps://security.archlinux.org/CVE-2020-28017", "creation_timestamp": "2021-05-04T14:50:41.000000Z"}, {"uuid": "f343bc77-368f-49dd-bd05-9a51df23cc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/someSecurityNotes/78", "content": "#exploit #exim #guide\n\u2014\u2014\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 exim (CVE-2020-28018).\n\u2014\u2014\n\nhttps://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2021-05-20T02:41:34.000000Z"}, {"uuid": "ba345610-1a71-4828-bb90-0400ff6d66c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "published-proof-of-concept", "source": "Telegram/5T9p9Zashh8_t2QaMEcrWCxGmV69ND__6VmH0ET2CJ3Gp-A", "content": "", "creation_timestamp": "2023-03-14T09:24:23.000000Z"}, {"uuid": "a1c4d929-a100-4357-97aa-b5dbc7df2255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28010", "type": "seen", "source": "https://t.me/irananonymous_officialf/559", "content": "\u06cc\u0627\u062f\u06cc \u06a9\u0646\u06cc\u0645 \u0627\u0632 \u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646 \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc 50 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0641\u0639\u0627\u0644\u0646 \n\n\u0628\u062e\u0648\u0627\u06cc\u0645 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0646\u06cc\u0645 \u0628\u0647 \nCVE-2017-3142\n\nCVE-2023-42119\n\nCVE-2020-28010", "creation_timestamp": "2024-11-04T16:25:30.000000Z"}, {"uuid": "0ba1ccb7-536d-49e5-8da0-9fbeef2afa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28010", "type": "seen", "source": "https://t.me/iranAnonymous_Ko/2713", "content": "\u06cc\u0627\u062f\u06cc \u06a9\u0646\u06cc\u0645 \u0627\u0632 \u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646 \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc 50 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0641\u0639\u0627\u0644\u0646 \n\n\u0628\u062e\u0648\u0627\u06cc\u0645 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0646\u06cc\u0645 \u0628\u0647 \nCVE-2017-3142\n\nCVE-2023-42119\n\nCVE-2020-28010", "creation_timestamp": "2024-11-04T16:27:07.000000Z"}, {"uuid": "61eaf6c2-ad47-42f9-a2db-8f357bb4ed8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "Telegram/RunQ6C-wdh1CdujsWSMBG_b9rRp9KM1dCcRlmkPgCQHIUw", "content": "", "creation_timestamp": "2021-05-16T13:08:28.000000Z"}, {"uuid": "855a93c7-cf2f-4ddf-8352-db3c3eea1945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-08-03T10:06:00.351856Z"}, {"uuid": "860e7137-27fb-444b-8f91-4cd867f36e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3379", "content": "#Threat_Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc", "creation_timestamp": "2021-05-16T13:07:06.000000Z"}, {"uuid": "99516bea-ae77-490c-af43-890e3a6b4065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7921", "content": "#exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2023-03-13T22:21:06.000000Z"}, {"uuid": "eb95dfd2-402f-4c8c-9591-21f7dc596a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28010", "type": "seen", "source": "https://t.me/GhostsIranOfficial/114", "content": "\u06cc\u0627\u062f\u06cc \u06a9\u0646\u06cc\u0645 \u0627\u0632 \u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646 \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc 50 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0641\u0639\u0627\u0644\u0646 \n\n\u0628\u062e\u0648\u0627\u06cc\u0645 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0646\u06cc\u0645 \u0628\u0647 \nCVE-2017-3142\n\nCVE-2023-42119\n\nCVE-2020-28010", "creation_timestamp": "2024-11-04T16:27:07.000000Z"}, {"uuid": "9d481486-c70d-4a1d-a276-2f6da9fc9c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-08-04T00:00:42.475910Z"}, {"uuid": "bd1f1956-df7f-497f-825f-c79e880c6409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-07-29T12:02:58.081843Z"}, {"uuid": "d2290ed7-2609-42b9-9d2a-06c55d074e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-07-30T00:02:47.759667Z"}, {"uuid": "486d9295-0a52-4f55-a9cc-fe837bb81768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-01T17:00:21.866801Z"}, {"uuid": "02c22015-6189-4952-933b-8f8b7a327378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-01T17:00:50.405928Z"}, {"uuid": "5c600ddc-7697-4a58-bd3e-85c0d04487fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-02T01:04:02.564953Z"}, {"uuid": "efcc063c-99fb-4fb8-b6e4-9ff8b3a67ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-02T01:04:39.274576Z"}, {"uuid": "cc0060af-47c3-42da-b691-3f466e347c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-10T02:00:04.566670Z"}, {"uuid": "02d82f1d-496b-46ad-adad-0513bddfe5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2801", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-11T00:00:55.294017Z"}, {"uuid": "06b92be8-5e88-4a9b-b30a-c2b6318e81ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-11T06:00:05.153079Z"}, {"uuid": "f4d9f9e7-0e87-4a01-b845-39ecc0f87676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-12T00:00:50.172943Z"}]}