{"vulnerability": "cve-2020-28595", "sightings": [{"uuid": "d7ac2e18-304d-4352-96f6-d6d4ebea00dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "seen", "source": "https://t.me/cibsecurity/23417", "content": "\u203c CVE-2020-28595 \u203c\n\nAn out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T00:41:53.000000Z"}, {"uuid": "dc105eb4-7c25-44d5-8c65-c2f22a93c5bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2560", "content": "#exploit\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer)\n\n1. CVE-2020-28595:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\n\n2. CVE-2020-28596:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220", "creation_timestamp": "2023-04-11T02:23:08.000000Z"}, {"uuid": "a8c1d6df-3d4c-439b-bc68-cec86b1bad5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "seen", "source": "https://t.me/cissp/2196", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "creation_timestamp": "2026-09-01T17:01:05.102383Z"}, {"uuid": "e1ce4247-f298-4466-b121-9bbb4b6b4d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "seen", "source": "https://t.me/cissp/2196", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "creation_timestamp": "2026-09-02T01:04:54.861014Z"}, {"uuid": "a7f30db4-4e1c-4777-a7c5-42490af001f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2196", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "creation_timestamp": "2026-09-11T20:00:06.732099Z"}, {"uuid": "532d00bb-a1ac-4782-911b-0b08b2500b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28595", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2196", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "creation_timestamp": "2026-09-12T00:00:31.317308Z"}]}