{"vulnerability": "cve-2020-7200", "sightings": [{"uuid": "2c13f9f0-bb05-4254-a5e7-52d440387d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "8b6229b3-3e2e-4f53-8eee-21516e42cd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:30.000000Z"}, {"uuid": "4a754f71-c0fa-4143-a866-198971750bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb", "content": "", "creation_timestamp": "2021-03-08T22:58:04.000000Z"}, {"uuid": "502eca64-359c-4aa8-8bf0-d24189a6f93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cibsecurity/21104", "content": "\u203c CVE-2020-7200 \u203c\n\nA potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-19T02:44:20.000000Z"}, {"uuid": "f8e02ad2-c469-4678-a5e6-294e8648b90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2412", "content": "#exploit\nCVE-2020-7200:\nHPE SIM AMF Deserialization lead to RCE\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\n]-> PoC: https://github.com/testanull/ProjectSIM", "creation_timestamp": "2024-09-16T16:02:19.000000Z"}, {"uuid": "4019fdb6-9ed8-4746-8692-84a21073b402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-01T17:01:09.019921Z"}, {"uuid": "6b26ab9e-2d43-431a-8a74-beff19308f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-01T17:01:09.063414Z"}, {"uuid": "820827bf-9874-44a4-a2a9-c2f640ec8c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-11T22:00:04.842086Z"}, {"uuid": "7731b208-244f-42bb-a7c3-08d7523eef4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-11T22:00:04.888180Z"}]}