{"vulnerability": "cve-2020-3716", "sightings": [{"uuid": "d0d13dd8-0abb-4afe-a788-d7f6c39de334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3716", "type": "seen", "source": "https://t.me/information_security_channel/34541", "content": "Magento 2.3.4 Patches Critical Code Execution Vulnerabilities\nhttp://feedproxy.google.com/~r/Securityweek/~3/Huq0iOsUnCg/magento-234-patches-critical-code-execution-vulnerabilities\n\nMagento 2.3.4 was released this week with patches for six vulnerabilities, including three that are considered critical.\nThe first of these severe security issues is related to deserialization of untrusted data. Tracked as CVE-2020-3716, the bug could lead to arbitrary code execution.\nread more (https://www.securityweek.com/magento-234-patches-critical-code-execution-vulnerabilities)", "creation_timestamp": "2020-01-29T17:05:45.000000Z"}, {"uuid": "d4333064-2357-4668-a349-377c2f244b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-37168", "type": "seen", "source": "https://t.me/shimiscyberworld/1455", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2020-37168 \u2014 CVSS 9.8\nEcommerce Systempay 1.0 Critical Weak Crypto Vulnerability (CVE-2020-37168)\n\nCVE-2020-37168 \u2014 Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2020-37168 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:05.340454Z"}, {"uuid": "63bba081-6bc0-4c7a-8feb-d3d81247cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-37168", "type": "seen", "source": "https://t.me/shimiscyberworld/1455", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2020-37168 \u2014 CVSS 9.8\nEcommerce Systempay 1.0 Critical Weak Crypto Vulnerability (CVE-2020-37168)\n\nCVE-2020-37168 \u2014 Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2020-37168 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:56.952202Z"}]}