{"vulnerability": "CVE-2020-9483", "sightings": [{"uuid": "2dc483ac-d9c7-4617-a2f6-c821fa624b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3879", "content": "#exploit\n1. Windows 10 2004/21H1 - WFP Default Rules AppContainer Capability Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2207\n\n2. CVE-2020-9483:\nApache SkyWalking - SQL Injection\nhttps://github.com/Neko2sh1ro/CVE-2020-9483", "creation_timestamp": "2022-09-15T03:15:14.000000Z"}, {"uuid": "8c1b6adb-9d01-4e37-8485-47e33ce9c0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/208", "content": "#BugBountyTips of the Day\nInstall all basic Pentesting tools with a single cURL command - curl --proto '= https' --tlsv1.2 -sSf  https://t.co/3FioOteZVE | bash - Created by: @_superhero1  - #tryhackme #bash #hacktools #ctf #pentesting #cybersecurity #cybersecuritytips #bughunting #bugbounty #superhero1  https://t.co/yc5YovWjG6\n---\n#bugbountytips  https://t.co/hgfiBjgZtz has an AMAZING collection of all the bug bounty programs out there, including not listed on platforms. Powered by @yeswehack \u2764\ufe0f thank you for this goldmine.\n---\nHacked into an organization and have access all of there User, Stuff, Database plain text information  They have #bugbounty policy & I reported this issue a while ago. Still received no update   Companies blaming Hacker breaching their data but they don't even care about security  https://t.co/FbaqewmYa4\n---\nAdmin panel access: 1. Found a subdomain like this: admin.staging.<redacted>.ph 2. It\u2019s directly asking me to signin using google OAuth > proceeded with signin 4. Voila!! it accepted me as admin and showing all developers details,merge requests etc.,  #bugbounty #bugbountytips\n---\nCVE-2020-9483 SkyWalking Sqli   #graphql #nuclei #bugbountytips  https://t.co/AuFGnEyFl8\n---\nGithub Recon with Github Dorks.  #bugbountytips #bugbountytip #cybersecurity #infosecurity #HackeNews  https://t.co/EFzef2XWZU", "creation_timestamp": "2021-03-22T13:37:04.000000Z"}, {"uuid": "3f96c586-222a-47ad-9593-7fb19714bc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "seen", "source": "https://t.me/cissp/3835", "content": "Offensive security\n1. Frida & jailbreak detection\nhttps://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass\n// anti-jailbreak, anti-Frida, anti-debug used in PokemonGO\n2. Pyhton script for HTTP 40x responses bypassing: Verb tampering, headers, bugbountytips tricks and 2454 User-Agents\nhttps://github.com/lobuhi/byp4xx\n\nexploit\n1. Windows 10 2004/21H1 - WFP Default Rules AppContainer Capability Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2207\n\n2. PoC of SQL Injection vuln (CVE-2020-9483, Apache SkyWalking)\nhttps://github.com/Neko2sh1ro/CVE-2020-9483\n\nMalware analysis\n1. DevilsTongue/SOURGUM malware\nhttps://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\n2. Windows Pool OverFlow Exploit\nhttps://vul.360.net/archives/83", "creation_timestamp": "2026-09-01T17:00:45.706176Z"}, {"uuid": "e2ce33d7-6524-4aa4-81dd-7842140f2287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "seen", "source": "https://t.me/cissp/3835", "content": "Offensive security\n1. Frida & jailbreak detection\nhttps://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass\n// anti-jailbreak, anti-Frida, anti-debug used in PokemonGO\n2. Pyhton script for HTTP 40x responses bypassing: Verb tampering, headers, bugbountytips tricks and 2454 User-Agents\nhttps://github.com/lobuhi/byp4xx\n\nexploit\n1. Windows 10 2004/21H1 - WFP Default Rules AppContainer Capability Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2207\n\n2. PoC of SQL Injection vuln (CVE-2020-9483, Apache SkyWalking)\nhttps://github.com/Neko2sh1ro/CVE-2020-9483\n\nMalware analysis\n1. DevilsTongue/SOURGUM malware\nhttps://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\n2. Windows Pool OverFlow Exploit\nhttps://vul.360.net/archives/83", "creation_timestamp": "2026-09-02T01:04:32.540471Z"}, {"uuid": "51ca839c-3228-43c0-98f9-00edab276860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3835", "content": "Offensive security\n1. Frida & jailbreak detection\nhttps://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass\n// anti-jailbreak, anti-Frida, anti-debug used in PokemonGO\n2. Pyhton script for HTTP 40x responses bypassing: Verb tampering, headers, bugbountytips tricks and 2454 User-Agents\nhttps://github.com/lobuhi/byp4xx\n\nexploit\n1. Windows 10 2004/21H1 - WFP Default Rules AppContainer Capability Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2207\n\n2. PoC of SQL Injection vuln (CVE-2020-9483, Apache SkyWalking)\nhttps://github.com/Neko2sh1ro/CVE-2020-9483\n\nMalware analysis\n1. DevilsTongue/SOURGUM malware\nhttps://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\n2. Windows Pool OverFlow Exploit\nhttps://vul.360.net/archives/83", "creation_timestamp": "2026-09-11T01:00:05.189816Z"}, {"uuid": "b3429153-05df-4223-9122-d9ad0c8c0b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9483", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3835", "content": "Offensive security\n1. Frida & jailbreak detection\nhttps://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass\n// anti-jailbreak, anti-Frida, anti-debug used in PokemonGO\n2. Pyhton script for HTTP 40x responses bypassing: Verb tampering, headers, bugbountytips tricks and 2454 User-Agents\nhttps://github.com/lobuhi/byp4xx\n\nexploit\n1. Windows 10 2004/21H1 - WFP Default Rules AppContainer Capability Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2207\n\n2. PoC of SQL Injection vuln (CVE-2020-9483, Apache SkyWalking)\nhttps://github.com/Neko2sh1ro/CVE-2020-9483\n\nMalware analysis\n1. DevilsTongue/SOURGUM malware\nhttps://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\n2. Windows Pool OverFlow Exploit\nhttps://vul.360.net/archives/83", "creation_timestamp": "2026-09-12T00:00:58.379504Z"}]}