{"metadata": {"vulnerability": "CVE-2020-15048", "count": 6, "kinds": {"milestone": 0, "sighting": 5, "kev": 0, "other": 1}}, "data": [{"timestamp": "2023-02-25T05:56:12Z", "date_only": false, "value": "2023-02-25T05:56:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1749", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "b61ad3e4-0a5f-4ea4-9546-5e91c6838b17", "content": "#Offensive_security\n1. Collection of various techniques to bypass Linux Kernel Address Space Layout Randomization (KASLR) and retrieve the kernel base virtual address on x86/x86_64 architectures as an unprivileged local user\nhttps://github.com/bcoles/kasld\n2. Espressif ESP32: Bypassing Flash Encryption (CVE-2020-15048)\nhttps://raelize.com/blog/espressif-systems-esp32-bypassing-flash-encryption", "url": "https://t.me/CyberSecurityTechnologies/1749", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:21:43.813Z", "date_only": false, "value": "2023-12-13T01:21:43.813092Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-15048", "record": "GSD-2020-15048", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-08T02:57:25Z", "date_only": false, "value": "2024-05-08T02:57:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1764", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "ad2c0698-7a0e-4f0f-be70-29d41e47176a", "content": "#Red_Team_Tactics\n1. Bypassing Flash Encryption by leveraging a design weakness (CVE-2020-15048) in combination with EMFI\nhttps://raelize.com/posts/espressif-systems-esp32-bypassing-flash-encryption\n2. Run as SYSTEM using Evil-WinRM\nhttps://malicious.link/post/2020/run-as-system-using-evil-winrm", "url": "https://t.me/CyberSecurityTechnologies/1764", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-07T03:56:54Z", "date_only": false, "value": "2025-10-07T03:56:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sankethj/249a775d52cb74d54393c86738922910", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "82637736-96f1-415b-adb7-3d4a189dd788", "url": "https://gist.github.com/sankethj/249a775d52cb74d54393c86738922910"}, {"timestamp": "2026-08-27T09:00:03.484Z", "date_only": false, "value": "2026-08-27T09:00:03.484939Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehaking/2929", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "2cde3b1e-ae1e-4484-a398-209b12fde624", "url": "https://t.me/thehaking/2929"}, {"timestamp": "2026-08-28T00:01:00.171Z", "date_only": false, "value": "2026-08-28T00:01:00.171181Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehaking/2929", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "c9a432ca-dfc8-47b4-b3ec-5bf8bdf01d8e", "url": "https://t.me/thehaking/2929", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-09T14:19:44.301Z", "anchors": {"origin": null, "discovery": null, "report": null, "acknowledgement": null, "disclosure": null, "exploit_publication": {"timestamp": "2023-02-25T05:56:12Z", "date_only": false, "value": "2023-02-25T05:56:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1749", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "b61ad3e4-0a5f-4ea4-9546-5e91c6838b17", "content": "#Offensive_security\n1. Collection of various techniques to bypass Linux Kernel Address Space Layout Randomization (KASLR) and retrieve the kernel base virtual address on x86/x86_64 architectures as an unprivileged local user\nhttps://github.com/bcoles/kasld\n2. Espressif ESP32: Bypassing Flash Encryption (CVE-2020-15048)\nhttps://raelize.com/blog/espressif-systems-esp32-bypassing-flash-encryption", "url": "https://t.me/CyberSecurityTechnologies/1749", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["start"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["start", "end"]}, "time_unpatched": {"available": false, "missing": ["start"]}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 116929412.301536, "hours": 32480.39230598222, "days": 1353.349679415926, "min_seconds": 116929412.301536, "max_seconds": 116929412.301536, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-02-25T05:56:12Z", "date_only": false, "value": "2023-02-25T05:56:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1749", "record": "CVE-2020-15048", "field": "creation_timestamp", "uuid": "b61ad3e4-0a5f-4ea4-9546-5e91c6838b17", "content": "#Offensive_security\n1. Collection of various techniques to bypass Linux Kernel Address Space Layout Randomization (KASLR) and retrieve the kernel base virtual address on x86/x86_64 architectures as an unprivileged local user\nhttps://github.com/bcoles/kasld\n2. Espressif ESP32: Bypassing Flash Encryption (CVE-2020-15048)\nhttps://raelize.com/blog/espressif-systems-esp32-bypassing-flash-encryption", "url": "https://t.me/CyberSecurityTechnologies/1749", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T14:19:44.301Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}