{"vulnerability": "cve-2020-9484", "sightings": [{"uuid": "1ac6b4b3-d8cd-408d-a56b-6376e840e63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/cKure/776", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Apache Tomcat RCE by deserialization (CVE-2020-9484) \u2013 write-up and exploit\n\nhttps://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/ #CodeExecution", "creation_timestamp": "2020-06-04T13:51:41.000000Z"}, {"uuid": "62b63071-37c5-40c1-b831-b5bb6a93f269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/cybred/138", "content": "\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e RCE \u0432 Apache Tomcat.\n\nhttps://telegra.ph/Apache-Tomcat-RCE-CVE-2020-9484---Rajtap-i-EHksplojt-06-04", "creation_timestamp": "2020-06-04T19:10:01.000000Z"}, {"uuid": "c391467d-6bbc-44a9-ac74-90c1be9c6fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1896", "content": "CVE-2020-9484\nApache Tomcat RCE by deserialization (CVE-2020-9484)\nhttps://github.com/VICXOR/CVE-2020-9484\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-03T13:01:29.000000Z"}, {"uuid": "c7e623c4-e41a-4b99-b27f-3e8adb9fc8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/1044", "content": "\ud83d\udd30 \u0623\u0647\u0645 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641\u00a0 \u0645\u0639 POC\n\nCVE-2020-17530 |\u00a0 \u0623\u0628\u0627\u062a\u0634\u064a \u0627\u0644\u062f\u0639\u0627\u0645\u0627\u062a RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\n\u0633\u0627\u0644\u062a\u0633\u062a\u0627\u0643 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u0623\u0648\u0646\u0648\u0645\u064a RCE |\u00a0 CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\n\u0634\u0628\u062d \u0627\u0644\u0642\u0637 |\u00a0 CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\n\u0623\u0648\u0631\u0627\u0643\u0644 \u0648\u064a\u0628 \u0644\u0648\u062c\u064a\u0643 RCE |\u00a0 CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u062a\u0648\u0645\u0643\u0627\u062a RCE |\u00a0 CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\n\u0645\u0648\u062f\u0644 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\n\u0633\u064a\u0633\u0643\u0648 CVE-2020-3452 \u0635\n\nhttps://youtu.be/-UldKwwVgHE\n\n\u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0645\u0633\u0627\u0639\u062f \u0644\u0642\u0627\u0639\u062f\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0648\u0631\u062f\u0628\u0631\u064a\u0633 |\u00a0 CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 \u0639\u0646\u0648\u0627\u0646 IP \u0643\u0628\u064a\u0631\n\nhttps://youtu.be/-ppzdYDk-ZM\n\n\u0645\u0642\u0627\u0637\u0639 \u0641\u064a\u062f\u064a\u0648 \u0623\u062e\u0631\u0649 \u062d\u0648\u0644 CVE PoC\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\n\u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u062e\u062a\u0628\u0631 \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u062a\u0637\u0631\u0641 \u0627\u0644\u0639\u0646\u064a\u0641: https://www.vulnmachines.com", "creation_timestamp": "2024-03-29T18:27:13.000000Z"}, {"uuid": "45a00d3a-e59d-440c-930a-fd892acf52d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "Telegram/k6hHUJVRmEVte2QfNLuU8-v67rBZSq4t8lJINPEEK3muAg", "content": "", "creation_timestamp": "2023-11-22T10:48:36.000000Z"}, {"uuid": "32d42675-09cd-4808-84e1-4984f5b71be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/arpsyndicate/91", "content": "#ExploitObserverAlert\n\nCVE-2020-9484\n\nDESCRIPTION: Exploit Observer has 112 entries related to CVE-2020-9484. When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.\n\nFIRST-EPSS: 0.883600000\nNVD-IS: 5.9\nNVD-ES: 1.0", "creation_timestamp": "2023-11-11T18:19:42.000000Z"}, {"uuid": "e36a6062-b100-4edc-89a5-3e1a5d01c12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/arpsyndicate/1687", "content": "#ExploitObserverAlert\n\nCVE-2020-9484\n\nDESCRIPTION: Exploit Observer has 114 entries related to CVE-2020-9484. When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.\n\nFIRST-EPSS: 0.883600000\nNVD-IS: 5.9\nNVD-ES: 1.0", "creation_timestamp": "2023-12-11T01:58:16.000000Z"}, {"uuid": "c3d3dff4-caf6-4c9e-9509-044d6d3d2912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cibsecurity/24286", "content": "\u203c CVE-2021-25329 \u203c\n\nThe fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-01T14:42:50.000000Z"}, {"uuid": "28a17f4c-3c0a-42a2-98b8-44a15c9e6ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/6476", "content": "Apache Tomcat RCE by deserialization (CVE-2020-9484) \u2013 write-up and exploit\nhttps://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2020-06-04T15:34:17.000000Z"}, {"uuid": "9daff0cd-c7b4-4785-bf1d-ca86ff120d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/4315", "content": "Apache Tomcat RCE by deserialization (CVE-2020-9484) \u2013 write-up and exploit https://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2020-06-04T15:34:54.000000Z"}, {"uuid": "d8368f66-e313-4a66-9b79-f3fdb850e823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/4886", "content": "Apache Tomcat Deserialization of Untrusted Data RCE (CVE-2020\u20139484)\n\nhttps://medium.com/@romnenko/apache-tomcat-deserialization-of-untrusted-data-rce-cve-2020-9484-afc9a12492c4", "creation_timestamp": "2020-11-12T00:28:45.000000Z"}, {"uuid": "272d6aea-c667-41b3-ad02-00040a1065fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1218", "content": "#exploit\n1. CVE-2020-9484:\nApache Tomcat (10.x <10.0.0-M5, 9.x <9.0.35, 8.x <8.5.55, 7.x <7.0.104) Vulnerability in NetApp Products\nhttps://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit\n]-> PoC: https://github.com/masahiro331/CVE-2020-9484\n\n2. CVE-2020-10136:\nA flaw in the IP-in-IP tunneling protocol that can be exploited for DoS attacks/bypass security controls impact devices from Cisco and other vendors\nhttps://securityaffairs.co/wordpress/104192/security/ip-in-ip-flaw-cisco.html\n]-> PoC: https://github.com/CERTCC/PoC-Exploits/tree/master/cve-2020-10136", "creation_timestamp": "2024-10-26T00:35:24.000000Z"}, {"uuid": "e7201b09-877e-48a7-bb7b-200d67d070c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10925", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-9484_Exploit*\nGithub: https://github.com/d3fudd/CVE-2020-9484_Exploit", "creation_timestamp": "2026-07-31T05:00:03.696432Z"}, {"uuid": "0af644e2-de0e-47b8-ae66-001be9272458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10925", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-9484_Exploit*\nGithub: https://github.com/d3fudd/CVE-2020-9484_Exploit", "creation_timestamp": "2026-08-01T00:00:40.784753Z"}, {"uuid": "49f8b4d1-a4d4-4eb2-92c3-b8f684b4db60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-948444", "type": "seen", "source": "https://t.me/bhhub/27", "content": "#BugBountyTips of the Day\nI just published about why getting too many Duplicates in Bug Hunting and how can I overcome that #bugbounty #bugbountytips #infosec @Alra3ees @sillydadddy @stokfredrik @theXSSrat #100DaysOfCode   https://t.co/GwFkH5IJrj\n---\nNew tool release! urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services such as bitly and googl #BugBounty #bugbountytips   https://t.co/ksmoxBPbAT\n---\nImportant message to all bug bounty hunters!   #bugbountytip #Pentesting #Security #Hacking  https://t.co/m6Mers7LwR\n---\nloading a big bounty \ud83d\ude0e #tips mix between  1)Amass-Httpx-Nuclei 2)Dirsearch with specific wordlist 3)Github search in Language bash and python   #BugBounty #bugbountytips  https://t.co/MSTYvt4RPs\n---\nRank: 229 worked for more than a year on bugcrowd. never exposed or chetaed any bugcrowd system. is arguing about  priority to progroam owner crime? support and some nice bugcrowd community guys dont care at all. @Bugcrowd #bugbounty  https://t.co/5CzVLwATd5\n---\n1) #CVE-2020-948444 #bug #exploit #BugBounty   cat targets.txt | while read host do;do curl --insecure --silent -X GET $host/index.jsp -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/groovy' | grep -qs \"PersistentManagerBase\" && \\printf \"$host \\033[0;31mCVE-2020-948444\\n\"", "creation_timestamp": "2020-11-23T13:37:04.000000Z"}, {"uuid": "2dde2480-8fb5-4b05-8e85-e49cbdb9c43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/timcore_hacking/890", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e: 22 \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430\n\n\u0411\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Google Chrome, Apache Camel \u0438 Apache Tomcat, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified CCX \u0438 \u043f\u0440.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Google Chrome, Apache Camel \u0438 Apache Tomcat, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified CCX, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Schneider Electric EcoStruxure Operator Terminal Expert, \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Infinite Scroll - Ajax Load More \u0438 \u043f\u0440.\n\n\u0412 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Apache Camel \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 ( CVE-2020-11973 \u0438 CVE-2020-11972 ). \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nApache Software Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-9484 ) \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435 \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u043e\u0432 Java \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Apache Tomcat, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat \u0441 10.0.0-M1 \u043f\u043e 10.0.0-M4, Apache Tomcat \u0441 9.0.0.M1 \u043f\u043e 9.0.34, Apache Tomcat \u0441 8.5.0 \u043f\u043e 8.5.54, Apache Tomcat \u0441 7.0.0 \u043f\u043e 7.0.103\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 , \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0445: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0447\u0442\u0435\u043d\u0438\u044f (CVE-2020-6465), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043c\u0435\u0434\u0438\u0430 (CVE-2020-6466), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 WebRTC (CVE-2020-6467), \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2020-6468) \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 (CVE-2020-6469).\n\nCisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-3280 ) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified Contact Center Express. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Java \u0440\u0435\u0448\u0435\u043d\u0438\u044f UCCX \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Schneider Electric EcoStruxure Operator Terminal Expert \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 ( CVE-2020-7493 ) \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 FreeRDP \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 , \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f DoS-\u0430\u0442\u0430\u043a.\n\n\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Infinite Scroll \u2013 Ajax Load More \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-9586 ) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0436\u0438\u0432\u044b\u0445 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a\u043e\u0432 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f Adobe Character Animator. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Adobe Character Animator 3.2 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430 BoundingBox \u0432 PostScript.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Adobe Premiere Pro \u0438 Adobe Premiere Rush , \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/508586.php", "creation_timestamp": "2026-08-05T05:00:06.214688Z"}, {"uuid": "1a85bd64-fc8e-466a-be55-8fbd1669b8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/timcore_hacking/890", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e: 22 \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430\n\n\u0411\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Google Chrome, Apache Camel \u0438 Apache Tomcat, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified CCX \u0438 \u043f\u0440.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Google Chrome, Apache Camel \u0438 Apache Tomcat, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified CCX, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Schneider Electric EcoStruxure Operator Terminal Expert, \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Infinite Scroll - Ajax Load More \u0438 \u043f\u0440.\n\n\u0412 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Apache Camel \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 ( CVE-2020-11973 \u0438 CVE-2020-11972 ). \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nApache Software Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-9484 ) \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435 \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u043e\u0432 Java \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Apache Tomcat, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat \u0441 10.0.0-M1 \u043f\u043e 10.0.0-M4, Apache Tomcat \u0441 9.0.0.M1 \u043f\u043e 9.0.34, Apache Tomcat \u0441 8.5.0 \u043f\u043e 8.5.54, Apache Tomcat \u0441 7.0.0 \u043f\u043e 7.0.103\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 , \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0445: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0447\u0442\u0435\u043d\u0438\u044f (CVE-2020-6465), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043c\u0435\u0434\u0438\u0430 (CVE-2020-6466), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 WebRTC (CVE-2020-6467), \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2020-6468) \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 (CVE-2020-6469).\n\nCisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-3280 ) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Unified Contact Center Express. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Java \u0440\u0435\u0448\u0435\u043d\u0438\u044f UCCX \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Schneider Electric EcoStruxure Operator Terminal Expert \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 ( CVE-2020-7493 ) \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 FreeRDP \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 , \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f DoS-\u0430\u0442\u0430\u043a.\n\n\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Infinite Scroll \u2013 Ajax Load More \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ( CVE-2020-9586 ) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0436\u0438\u0432\u044b\u0445 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a\u043e\u0432 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f Adobe Character Animator. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Adobe Character Animator 3.2 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430 BoundingBox \u0432 PostScript.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Adobe Premiere Pro \u0438 Adobe Premiere Rush , \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/508586.php", "creation_timestamp": "2026-08-06T00:00:53.144919Z"}, {"uuid": "1eb47ebe-cb45-429e-9598-5386f16c8ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/thehaking/411", "content": "https://te.legra.ph/Apache-Tomcat-RCE-CVE-2020-9484---Rajtap-i-EHksplojt-06-22", "creation_timestamp": "2026-08-28T00:00:57.630844Z"}, {"uuid": "0a6ff0b8-766b-413a-abe8-b1f13c01f2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/reverseame/255", "content": "Apache Tomcat RCE by deserialization (CVE-2020-9484) \u2013 write-up and exploit\nhttps://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2026-07-18T15:00:04.766006Z"}, {"uuid": "57dcbdd5-069f-45b8-91f0-a35c9e806c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/reverseame/146", "content": "https://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2026-07-18T15:00:05.438087Z"}, {"uuid": "506beb9e-8e80-4617-a5ee-97043222a3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/146", "content": "https://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2026-07-19T00:00:11.646976Z"}, {"uuid": "afd6a91d-850a-40d9-be15-d2e9eae1edf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/255", "content": "Apache Tomcat RCE by deserialization (CVE-2020-9484) \u2013 write-up and exploit\nhttps://www.redtimmy.com/java-hacking/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/", "creation_timestamp": "2026-07-19T00:00:12.408850Z"}, {"uuid": "a2e15229-49a6-4247-924f-9b0c898639c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/CVEhub/10925", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-9484_Exploit*\nGithub: https://github.com/d3fudd/CVE-2020-9484_Exploit", "creation_timestamp": "2026-07-29T12:00:38.328482Z"}, {"uuid": "1b198adb-9e5f-4b5e-8bb2-ca6bfe93dd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/thehaking/411", "content": "https://te.legra.ph/Apache-Tomcat-RCE-CVE-2020-9484---Rajtap-i-EHksplojt-06-22", "creation_timestamp": "2026-08-27T09:00:05.140004Z"}, {"uuid": "3f5ed284-7411-4072-9606-c723b28b2307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/CVEhub/10925", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-9484_Exploit*\nGithub: https://github.com/d3fudd/CVE-2020-9484_Exploit", "creation_timestamp": "2026-07-30T00:01:05.777277Z"}, {"uuid": "32f37f47-8708-4b52-a4b2-c6726c2c9dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-01T17:00:59.219463Z"}, {"uuid": "3ed83a76-8711-4684-b1c0-d59a19dc5593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-01T17:01:16.595926Z"}, {"uuid": "26df0ccb-c749-488e-800f-d2ed0b564dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-01T18:00:05.404419Z"}, {"uuid": "75604b73-dd4e-47a5-a917-8c7517525cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-02T01:03:30.888362Z"}, {"uuid": "9c7f0313-4aa9-42ff-9c94-d486c9c27f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-02T01:04:50.019536Z"}, {"uuid": "733243f4-3a60-4792-8575-7c616cbe127d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-02T01:05:05.457537Z"}, {"uuid": "83b263cf-7240-4ffe-96c4-2e37336462f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-08T21:00:03.858375Z"}, {"uuid": "6a97f7de-2567-4aba-8fd5-8558c88a5cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-09T00:00:13.742709Z"}, {"uuid": "15e75071-8a31-4c67-b862-3373552ef009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-11T16:00:06.157540Z"}, {"uuid": "c4973db1-37d3-40c0-8c69-243a15e8b7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-12T00:00:37.393717Z"}, {"uuid": "58decb7e-eada-478c-98b2-cca155239931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-12T03:00:04.732266Z"}, {"uuid": "d73f6f35-82f4-47ee-86ca-496a9b9012fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9484", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-13T00:00:57.996701Z"}]}