{"vulnerability": "cve-2020-28018", "sightings": [{"uuid": "f343bc77-368f-49dd-bd05-9a51df23cc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/someSecurityNotes/78", "content": "#exploit #exim #guide\n\u2014\u2014\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 exim (CVE-2020-28018).\n\u2014\u2014\n\nhttps://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2021-05-20T02:41:34.000000Z"}, {"uuid": "61eaf6c2-ad47-42f9-a2db-8f357bb4ed8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "Telegram/RunQ6C-wdh1CdujsWSMBG_b9rRp9KM1dCcRlmkPgCQHIUw", "content": "", "creation_timestamp": "2021-05-16T13:08:28.000000Z"}, {"uuid": "855a93c7-cf2f-4ddf-8352-db3c3eea1945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-08-03T10:06:00.351856Z"}, {"uuid": "860e7137-27fb-444b-8f91-4cd867f36e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3379", "content": "#Threat_Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc", "creation_timestamp": "2021-05-16T13:07:06.000000Z"}, {"uuid": "9d481486-c70d-4a1d-a276-2f6da9fc9c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-08-04T00:00:42.475910Z"}, {"uuid": "bd1f1956-df7f-497f-825f-c79e880c6409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-07-29T12:02:58.081843Z"}, {"uuid": "d2290ed7-2609-42b9-9d2a-06c55d074e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/reverseame/1176", "content": "Nice write-up \u00bb From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) [code in https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2020-28018] https://adepts.of0x.cc/exim-cve-2020-28018/", "creation_timestamp": "2026-07-30T00:02:47.759667Z"}, {"uuid": "02c22015-6189-4952-933b-8f8b7a327378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-01T17:00:50.405928Z"}, {"uuid": "efcc063c-99fb-4fb8-b6e4-9ff8b3a67ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "seen", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-02T01:04:39.274576Z"}, {"uuid": "06b92be8-5e88-4a9b-b30a-c2b6318e81ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28018", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3200", "content": "Malware analysis\n1. DarkSide Ransomware Gang: An Overview\ud83d\ude09\nhttps://unit42.paloaltonetworks.com/darkside-ransomware\n2. A wormable SSH bot\nhttps://akijosberryblog.wordpress.com/2020/11/08/yantra-manav-a-wormable-ssh-bot\n\nThreat Research\n1. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)\ud83d\ude03\nhttps://adepts.of0x.cc/exim-cve-2020-28018\n2. Stealing secrets with Rust Macros PoC via VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nResearch\n\"undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation\", 2021.\n]-> https://uzl-its.github.io/undeserved-trust\n\n// The undeSErVed attack works not only against AMD CPUs protected by SEV but also SEV-ES (Secure Encrypted Virtualization-Encrypted State), an improved version of the technology that AMD released in 2017\n\nexploit\nCVE-2021-27342:\nD-Link home routers - telnet authentication brute-force protection bypass\nhttps://github.com/guywhataguy/D-Link-CVE-2021-27342-exploit\n\n]-> https://blog.whtaguy.com/2021/05/d-link-router-cve-2021-27342.html\n\nOffensive security\n1. HookDump: EDR function hook dumping\nhttps://securityonline.info/hookdump-edr-function-hook-dumping\n2. slopShell: php webshell\nhttps://github.com/oldkingcone/slopShell#setup", "creation_timestamp": "2026-09-11T06:00:05.153079Z"}]}