{"metadata": {"vulnerability": "CVE-2020-35489", "count": 33, "kinds": {"milestone": 4, "sighting": 18, "kev": 0, "other": 11}}, "data": [{"timestamp": "2020-12-17T00:00:00Z", "date_only": false, "value": "2020-12-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-35489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-17T19:15:00Z", "date_only": false, "value": "2020-12-17T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J93Q-24G6-27R6", "record": "GHSA-J93Q-24G6-27R6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2020-12-17T19:15:00Z", "date_only": false, "value": "2020-12-17T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-35489", "record": "GSD-2020-35489", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2020-12-17T19:15:14.353Z", "date_only": false, "value": "2020-12-17T19:15:14.353", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35489", "record": "FKIE_CVE-2020-35489", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-12-17T22:42:57Z", "date_only": false, "value": "2020-12-17T22:42:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21012", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "78fae6d2-efca-439f-82f6-25c14991b596", "content": "\u203c CVE-2020-35489 \u203c\n\nThe contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21012"}, {"timestamp": "2020-12-22T12:57:00Z", "date_only": false, "value": "2020-12-22T12:57Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-35489", "record": "GSD-2020-35489", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2021-01-20T00:00:00Z", "date_only": true, "value": "2021-01-20", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-06538", "record": "CNVD-2021-06538", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": true, "value": "2021-01-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-06538", "record": "CNVD-2021-06538", "field": "openTime", "linked_record": true}, {"timestamp": "2022-05-24T17:36:47Z", "date_only": false, "value": "2022-05-24T17:36:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J93Q-24G6-27R6", "record": "GHSA-J93Q-24G6-27R6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T17:36:47Z", "date_only": false, "value": "2022-05-24T17:36:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J93Q-24G6-27R6", "record": "GHSA-J93Q-24G6-27R6", "field": "modified", "linked_record": true}, {"timestamp": "2022-08-23T16:59:41Z", "date_only": false, "value": "2022-08-23T16:59:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arm1tage/296", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "7c70bd66-4349-4137-a853-e228681aacff", "content": "\u0423\u042f\u0417\u0412\u0418\u041c\u041e\u0421\u0422\u042c, \u041a\u041e\u0422\u041e\u0420\u0410\u042f \u0417\u0410\u0421\u0422\u0410\u0412\u0418\u041b\u0410 \u0410\u0412\u0422\u041e\u0420\u0410 \u041e\u0411\u041e\u0421\u0420\u0410\u0422\u042c\u0421\u042f\n\n\u0417\u043d\u0430\u043a\u043e\u043c\u044c\u0442\u0435\u0441\u044c, CVE-2020-35489, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Contact Form 7 \u0432 WordPress \u0432\u0435\u0440\u0441\u0438\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 5.3.2 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043b\u0438\u0442\u044c \u0448\u0435\u043b\u043b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043f\u043a\u0443 wp-content/uploads... \u0421\u043a\u0440\u0438\u043f\u0442-\u043a\u0438\u0434\u0434\u0438 \u0430\u0432\u0442\u043e\u0440, \u0440\u0430\u0434\u0443\u044f\u0441\u044c \u0437\u0430\u043b\u0438\u0442\u043e\u043c\u0443 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441 \u0448\u0435\u043b\u043b\u0443, \u0442\u0443\u0442 \u0436\u0435 \u043f\u043e\u0437\u043d\u0430\u043b \u0433\u043e\u0440\u0435\u0447\u044c \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u0443\u043f\u043e \u043d\u0435 \u0441\u043c\u043e\u0433 \u043d\u0430\u0439\u0442\u0438 \u043a\u0443\u0434\u0430 \u0437\u0430\u043b\u0438\u043b\u0441\u044f \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b\ud83e\udd13\n\n\u0421\u0442\u0430\u0442\u044c\u044f\n\n\n#cve #wordpress", "url": "https://t.me/arm1tage/296"}, {"timestamp": "2023-06-05T06:48:53Z", "date_only": false, "value": "2023-06-05T06:48:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3076", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "c23cd565-528f-4055-8765-909c2da94324", "content": "Tools - Hackers Factory \n\nCVE-2023-33733\n\nThis write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an important one to patch and look out for.\n\nhttps://github.com/c53elyas/CVE-2023-33733\n\n#cve #cybersecurity #infosec\n\nLoki\n\nA Little Web Honeypot.\n\nhttps://github.com/TheKingOfDuck/Loki\n\n#cybersecurity #infosec\n\nPyrai - Mirai python variant\n\nThis is a working variant of the Mirai IOT botnet, this is fully written in Python3. In this paper I'm going to show you how to configure each script in order to setup your PyRai.\n\nhttps://github.com/readloud/PyRai\n\n#cybersecurity #infosec #redteam\n\nCVE-2023-33781\n\nD-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality.\n\nhttps://github.com/s0tr/CVE-2023-33781\n\n#cve #cybersecurity #infosec\n\nCVE-2023-33782\n\nD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality.\n\nhttps://github.com/s0tr/CVE-2023-33782\n\n#cve #cybersecurity #infosec\n\nHackBrowserData \n\nCommand-line tool for decrypting and exporting browser data ( passwords, history, cookies, bookmarks, credit cards, download records, localStorage and extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.\n\nhttps://github.com/moonD4rk/HackBrowserData\n\n#infosec #pentesting #redteam\n\nVMClarity \n\nOpen source tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets.\n\nhttps://github.com/openclarity/vmclarity\n\n#cybersecurity #infosec #pentesting\n\nCVE-2023-33246 \n\nRocketMQ Remote Code Execution #Exploit.\n\nhttps://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT\n\n#cve #cybersecurity #infosec\n\n2023-33381\n\nOS command injection on MitraStar GPT-2741GNAC.\n\nhttps://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC\n\n#cve #cybersecurity #infosec\n\nEyeballer\n\nEyeballer is meant for large-scope network penetration tests where you need to find \"interesting\" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what's likely to contain vulnerabilities, and what isn't.\n\nhttps://github.com/BishopFox/eyeballer\n\n#cybersecurity #infosec #pentesting\n\nMultichain Auditor\n\nObservations and tips for auditing protocols on multiple chains \ud83e\uddd0\n\nhttps://github.com/0xJuancito/multichain-auditor\n\n#cybersecurity #infosec\n\nCoraza - Web Application Firewall\n\nCoraza is an open source, enterprise-grade, high performance Web Application Firewall (WAF) ready to protect your beloved applications. It written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set.\n\nhttps://github.com/corazawaf/coraza\n\n#cybersecurity #infosec\n\nCVE-2020-35489\n\nCVE-2020-35489 Vulnerability Scanner in #Wordpress Websites.\n\nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker\n\n#cybersecurity #infosec\n\nRegStrike\n\nA .reg payload generator.\n\nhttps://github.com/itaymigdal/RegStrike\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3076", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-05T15:02:28Z", "date_only": false, "value": "2023-07-05T15:02:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8616", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "cb70875b-76d9-4b4a-aac9-3d8018290b37", "content": "#tools\n#Blue_Team_Techniques\n1. Ruby script to check and detect the CVE-2023-24488 security vulnerability in Citrix Gateway/ADC\nhttps://github.com/Abo5/CVE-2023-24488\n2. KRSI (eBPF+LSM) based Linux security auditing tool\nhttps://github.com/mrtc0/bouheki\n3. WordPress Sites Vulnerability Checker for CVE-2020-35489\nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker", "url": "https://t.me/CyberSecurityTechnologies/8616", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:22:00.805Z", "date_only": false, "value": "2023-12-13T01:22:00.805379Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-35489", "record": "GSD-2020-35489", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-03-07T19:15:55Z", "date_only": false, "value": "2024-03-07T19:15:55.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/S9OVQYfdNz0Aup1BmMIRFsjuMIIVbtZ6CrSGV042i0CzBPw", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "65601431-cc53-4eee-8611-b8f0b9ae496e"}, {"timestamp": "2024-07-12T10:38:05Z", "date_only": false, "value": "2024-07-12T10:38:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/paiddpam/3505", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "42648b78-bc70-435a-aad6-fb9866145523", "content": "- WP CVE-2020-35489 Checker\n+ Google Dork : inurl:/wp-content/plugins/contact-form-7/\n\nShare for everybody \nDownload \nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_", "url": "https://t.me/paiddpam/3505", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-12T17:13:04Z", "date_only": false, "value": "2024-07-12T17:13:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hitshare/2343", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "815151ec-95ab-4f60-a16b-3ec0d05aaeb7", "content": "- WP CVE-2020-35489 Checker\n+ Google Dork : inurl:/wp-content/plugins/contact-form-7/\n\nShare for everybody \nDownload \nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker\n\nChannel @StableExploitvv\nShare & Support Us", "url": "https://t.me/hitshare/2343", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-21T20:59:16Z", "date_only": false, "value": "2024-07-21T20:59:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PQfK35LzGlTqCn-1qhL2xtMgvwpuI0Nru-tsM7f5ymd2", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "7c8cdffc-d4a5-4f0c-8d20-275bb555ccd5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-04T17:02:08.102Z", "date_only": false, "value": "2024-08-04T17:02:08.102Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T17:02:08.102Z", "date_only": false, "value": "2024-08-04T17:02:08.102Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-35489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-18T11:36:19Z", "date_only": false, "value": "2024-08-18T11:36:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ByNbbDHZjaT1COluAalmuvxSwCeNvtmrdNcPTCLUkjjZc2iP", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "cd41a36c-67bd-4dd2-be9e-bb34ed104907"}, {"timestamp": "2024-09-18T23:44:37Z", "date_only": false, "value": "2024-09-18T23:44:37.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O8RJaZzuBZKodTP5o0k24qkcoG7b-8TflqJotgjjX4AbLmhC", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "c3b9872b-fb63-46b8-905e-5975c88c2cbb"}, {"timestamp": "2024-10-04T20:11:39Z", "date_only": false, "value": "2024-10-04T20:11:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8677", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "1b89f4dc-ea20-4f3a-81ec-1a51b1ee4a8f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPOC for RCE with CVE-2020-35489\nURL\uff1ahttps://github.com/aitech66/poc-CVE-2020-35489\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8677", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T03:13:47.793Z", "date_only": false, "value": "2026-06-17T03:13:47.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35489", "record": "FKIE_CVE-2020-35489", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:03:00.970Z", "date_only": false, "value": "2026-07-29T12:03:00.970019Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/741", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "9759e049-a7a1-4482-a624-d99eb8c89f51", "url": "https://t.me/reverseame/741"}, {"timestamp": "2026-07-30T00:02:50.432Z", "date_only": false, "value": "2026-07-30T00:02:50.432754Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/741", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "ae4e813b-cbc3-4156-80a2-8988b99d3576", "url": "https://t.me/reverseame/741"}, {"timestamp": "2026-08-03T15:00:06.400Z", "date_only": false, "value": "2026-08-03T15:00:06.400157Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/741", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "5a308250-2066-47cd-b8ef-7662e81f9917", "url": "https://t.me/reverseame/741"}, {"timestamp": "2026-08-04T00:00:38.059Z", "date_only": false, "value": "2026-08-04T00:00:38.059602Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/741", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "4e2d3a6a-af9f-4828-a28e-44110d03f675", "url": "https://t.me/reverseame/741"}, {"timestamp": "2026-09-01T17:00:17.358Z", "date_only": false, "value": "2026-09-01T17:00:17.358820Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7200", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "a4109e33-5a82-4502-909f-65ad62ceb660", "url": "https://t.me/cissp/7200"}, {"timestamp": "2026-09-09T20:00:06.076Z", "date_only": false, "value": "2026-09-09T20:00:06.076230Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7200", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "6077f38e-56df-4355-b924-50c795011610", "url": "https://t.me/cissp/7200", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T14:05:15Z", "date_only": false, "value": "2026-11-07T14:05:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109493", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "bca3f108-5e6f-4502-9459-a8ed4c588b5f", "url": "https://t.me/GithubRedTeam/109493", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-14T04:33:41.872Z", "anchors": {"origin": {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-06-05T06:48:53Z", "date_only": false, "value": "2023-06-05T06:48:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3076", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "c23cd565-528f-4055-8765-909c2da94324", "content": "Tools - Hackers Factory \n\nCVE-2023-33733\n\nThis write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an important one to patch and look out for.\n\nhttps://github.com/c53elyas/CVE-2023-33733\n\n#cve #cybersecurity #infosec\n\nLoki\n\nA Little Web Honeypot.\n\nhttps://github.com/TheKingOfDuck/Loki\n\n#cybersecurity #infosec\n\nPyrai - Mirai python variant\n\nThis is a working variant of the Mirai IOT botnet, this is fully written in Python3. In this paper I'm going to show you how to configure each script in order to setup your PyRai.\n\nhttps://github.com/readloud/PyRai\n\n#cybersecurity #infosec #redteam\n\nCVE-2023-33781\n\nD-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality.\n\nhttps://github.com/s0tr/CVE-2023-33781\n\n#cve #cybersecurity #infosec\n\nCVE-2023-33782\n\nD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality.\n\nhttps://github.com/s0tr/CVE-2023-33782\n\n#cve #cybersecurity #infosec\n\nHackBrowserData \n\nCommand-line tool for decrypting and exporting browser data ( passwords, history, cookies, bookmarks, credit cards, download records, localStorage and extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.\n\nhttps://github.com/moonD4rk/HackBrowserData\n\n#infosec #pentesting #redteam\n\nVMClarity \n\nOpen source tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets.\n\nhttps://github.com/openclarity/vmclarity\n\n#cybersecurity #infosec #pentesting\n\nCVE-2023-33246 \n\nRocketMQ Remote Code Execution #Exploit.\n\nhttps://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT\n\n#cve #cybersecurity #infosec\n\n2023-33381\n\nOS command injection on MitraStar GPT-2741GNAC.\n\nhttps://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC\n\n#cve #cybersecurity #infosec\n\nEyeballer\n\nEyeballer is meant for large-scope network penetration tests where you need to find \"interesting\" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what's likely to contain vulnerabilities, and what isn't.\n\nhttps://github.com/BishopFox/eyeballer\n\n#cybersecurity #infosec #pentesting\n\nMultichain Auditor\n\nObservations and tips for auditing protocols on multiple chains \ud83e\uddd0\n\nhttps://github.com/0xJuancito/multichain-auditor\n\n#cybersecurity #infosec\n\nCoraza - Web Application Firewall\n\nCoraza is an open source, enterprise-grade, high performance Web Application Firewall (WAF) ready to protect your beloved applications. It written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set.\n\nhttps://github.com/corazawaf/coraza\n\n#cybersecurity #infosec\n\nCVE-2020-35489\n\nCVE-2020-35489 Vulnerability Scanner in #Wordpress Websites.\n\nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker\n\n#cybersecurity #infosec\n\nRegStrike\n\nA .reg payload generator.\n\nhttps://github.com/itaymigdal/RegStrike\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3076", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 77718773.0, "hours": 21588.548055555555, "days": 899.5228356481482, "min_seconds": 77718773.0, "max_seconds": 77718773.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-06-05T06:48:53Z", "date_only": false, "value": "2023-06-05T06:48:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3076", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "c23cd565-528f-4055-8765-909c2da94324", "content": "Tools - Hackers Factory \n\nCVE-2023-33733\n\nThis write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an important one to patch and look out for.\n\nhttps://github.com/c53elyas/CVE-2023-33733\n\n#cve #cybersecurity #infosec\n\nLoki\n\nA Little Web Honeypot.\n\nhttps://github.com/TheKingOfDuck/Loki\n\n#cybersecurity #infosec\n\nPyrai - Mirai python variant\n\nThis is a working variant of the Mirai IOT botnet, this is fully written in Python3. In this paper I'm going to show you how to configure each script in order to setup your PyRai.\n\nhttps://github.com/readloud/PyRai\n\n#cybersecurity #infosec #redteam\n\nCVE-2023-33781\n\nD-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality.\n\nhttps://github.com/s0tr/CVE-2023-33781\n\n#cve #cybersecurity #infosec\n\nCVE-2023-33782\n\nD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality.\n\nhttps://github.com/s0tr/CVE-2023-33782\n\n#cve #cybersecurity #infosec\n\nHackBrowserData \n\nCommand-line tool for decrypting and exporting browser data ( passwords, history, cookies, bookmarks, credit cards, download records, localStorage and extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.\n\nhttps://github.com/moonD4rk/HackBrowserData\n\n#infosec #pentesting #redteam\n\nVMClarity \n\nOpen source tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets.\n\nhttps://github.com/openclarity/vmclarity\n\n#cybersecurity #infosec #pentesting\n\nCVE-2023-33246 \n\nRocketMQ Remote Code Execution #Exploit.\n\nhttps://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT\n\n#cve #cybersecurity #infosec\n\n2023-33381\n\nOS command injection on MitraStar GPT-2741GNAC.\n\nhttps://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC\n\n#cve #cybersecurity #infosec\n\nEyeballer\n\nEyeballer is meant for large-scope network penetration tests where you need to find \"interesting\" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what's likely to contain vulnerabilities, and what isn't.\n\nhttps://github.com/BishopFox/eyeballer\n\n#cybersecurity #infosec #pentesting\n\nMultichain Auditor\n\nObservations and tips for auditing protocols on multiple chains \ud83e\uddd0\n\nhttps://github.com/0xJuancito/multichain-auditor\n\n#cybersecurity #infosec\n\nCoraza - Web Application Firewall\n\nCoraza is an open source, enterprise-grade, high performance Web Application Firewall (WAF) ready to protect your beloved applications. It written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set.\n\nhttps://github.com/corazawaf/coraza\n\n#cybersecurity #infosec\n\nCVE-2020-35489\n\nCVE-2020-35489 Vulnerability Scanner in #Wordpress Websites.\n\nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker\n\n#cybersecurity #infosec\n\nRegStrike\n\nA .reg payload generator.\n\nhttps://github.com/itaymigdal/RegStrike\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3076", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 186401861.872652, "hours": 51778.29496462555, "days": 2157.428956859398, "min_seconds": 186401861.872652, "max_seconds": 186401861.872652, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-17T18:16:00Z", "date_only": false, "value": "2020-12-17T18:16:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T04:33:41.872Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 108683088.872652, "hours": 30189.74690907, "days": 1257.90612121125, "min_seconds": 108683088.872652, "max_seconds": 108683088.872652, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-06-05T06:48:53Z", "date_only": false, "value": "2023-06-05T06:48:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3076", "record": "CVE-2020-35489", "field": "creation_timestamp", "uuid": "c23cd565-528f-4055-8765-909c2da94324", "content": "Tools - Hackers Factory \n\nCVE-2023-33733\n\nThis write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an important one to patch and look out for.\n\nhttps://github.com/c53elyas/CVE-2023-33733\n\n#cve #cybersecurity #infosec\n\nLoki\n\nA Little Web Honeypot.\n\nhttps://github.com/TheKingOfDuck/Loki\n\n#cybersecurity #infosec\n\nPyrai - Mirai python variant\n\nThis is a working variant of the Mirai IOT botnet, this is fully written in Python3. In this paper I'm going to show you how to configure each script in order to setup your PyRai.\n\nhttps://github.com/readloud/PyRai\n\n#cybersecurity #infosec #redteam\n\nCVE-2023-33781\n\nD-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality.\n\nhttps://github.com/s0tr/CVE-2023-33781\n\n#cve #cybersecurity #infosec\n\nCVE-2023-33782\n\nD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality.\n\nhttps://github.com/s0tr/CVE-2023-33782\n\n#cve #cybersecurity #infosec\n\nHackBrowserData \n\nCommand-line tool for decrypting and exporting browser data ( passwords, history, cookies, bookmarks, credit cards, download records, localStorage and extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.\n\nhttps://github.com/moonD4rk/HackBrowserData\n\n#infosec #pentesting #redteam\n\nVMClarity \n\nOpen source tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets.\n\nhttps://github.com/openclarity/vmclarity\n\n#cybersecurity #infosec #pentesting\n\nCVE-2023-33246 \n\nRocketMQ Remote Code Execution #Exploit.\n\nhttps://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT\n\n#cve #cybersecurity #infosec\n\n2023-33381\n\nOS command injection on MitraStar GPT-2741GNAC.\n\nhttps://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC\n\n#cve #cybersecurity #infosec\n\nEyeballer\n\nEyeballer is meant for large-scope network penetration tests where you need to find \"interesting\" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what's likely to contain vulnerabilities, and what isn't.\n\nhttps://github.com/BishopFox/eyeballer\n\n#cybersecurity #infosec #pentesting\n\nMultichain Auditor\n\nObservations and tips for auditing protocols on multiple chains \ud83e\uddd0\n\nhttps://github.com/0xJuancito/multichain-auditor\n\n#cybersecurity #infosec\n\nCoraza - Web Application Firewall\n\nCoraza is an open source, enterprise-grade, high performance Web Application Firewall (WAF) ready to protect your beloved applications. It written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set.\n\nhttps://github.com/corazawaf/coraza\n\n#cybersecurity #infosec\n\nCVE-2020-35489\n\nCVE-2020-35489 Vulnerability Scanner in #Wordpress Websites.\n\nhttps://github.com/reneoliveirajr/wp_CVE-2020-35489_checker\n\n#cybersecurity #infosec\n\nRegStrike\n\nA .reg payload generator.\n\nhttps://github.com/itaymigdal/RegStrike\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3076", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T04:33:41.872Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}