{"metadata": {"vulnerability": "CVE-2020-35606", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2020-12-21T00:00:00Z", "date_only": false, "value": "2020-12-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-35606", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-21T19:19:17Z", "date_only": false, "value": "2020-12-21T19:19:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35606", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-21T20:15:00Z", "date_only": false, "value": "2020-12-21T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VQ42-23MP-RQH2", "record": "GHSA-VQ42-23MP-RQH2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-21T20:15:00Z", "date_only": false, "value": "2020-12-21T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-35606", "record": "GSD-2020-35606", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-21T20:15:12.617Z", "date_only": false, "value": "2020-12-21T20:15:12.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35606", "record": "FKIE_CVE-2020-35606", "field": "published"}, {"timestamp": "2020-12-21T22:52:17Z", "date_only": false, "value": "2020-12-21T22:52:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21140", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "b59a45a9-0f66-458b-9d90-20ac2ec2628b", "content": "\u203c CVE-2020-35606 \u203c\n\nArbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21140"}, {"timestamp": "2020-12-22T00:00:00Z", "date_only": false, "value": "2020-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/49318", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "6888549d-7216-44b3-9538-bdc46dc5d011", "url": "https://www.exploit-db.com/exploits/49318"}, {"timestamp": "2020-12-22T00:00:00Z", "date_only": true, "value": "2020-12-22", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-07125", "record": "CNVD-2021-07125", "field": "submitTime"}, {"timestamp": "2020-12-28T20:30:13Z", "date_only": false, "value": "2020-12-28T20:30:13.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-35606", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-31T18:30:13Z", "date_only": false, "value": "2020-12-31T18:30:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2350", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "a71ce13f-a578-431b-af19-ad21e2913ce7", "content": "#Threat_Research\n1. CVE-2020-35606 - Arbitrary Command Execution Vulnerability in Webmin\n// This vulnerability is bypassing the measure taken for CVE-2019-12840 and converting it into a new vector\nhttps://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.html\n2. SUNBURST, TEARDROP and the NetSec New Normal\nhttps://research.checkpoint.com/2020/sunburst-teardrop-and-the-netsec-new-normal\n3. CyRC analysis: Authentication bypass vulnerability in Java Bouncy Castle (PoC for CVE-2020-28052)\nhttps://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle", "url": "https://t.me/CyberSecurityTechnologies/2350"}, {"timestamp": "2021-01-28T00:00:00Z", "date_only": true, "value": "2021-01-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-07125", "record": "CNVD-2021-07125", "field": "openTime"}, {"timestamp": "2022-04-26T16:12:00Z", "date_only": false, "value": "2022-04-26T16:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-35606", "record": "GSD-2020-35606", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:37:09Z", "date_only": false, "value": "2022-05-24T17:37:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VQ42-23MP-RQH2", "record": "GHSA-VQ42-23MP-RQH2", "field": "published"}, {"timestamp": "2022-05-24T17:37:09Z", "date_only": false, "value": "2022-05-24T17:37:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VQ42-23MP-RQH2", "record": "GHSA-VQ42-23MP-RQH2", "field": "modified"}, {"timestamp": "2023-12-13T01:22:01.094Z", "date_only": false, "value": "2023-12-13T01:22:01.094096Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-35606", "record": "GSD-2020-35606", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T17:09:14.502Z", "date_only": false, "value": "2024-08-04T17:09:14.502Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-35606", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T17:09:14.502Z", "date_only": false, "value": "2024-08-04T17:09:14.502Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-35606", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:07:39Z", "date_only": false, "value": "2024-11-14T06:07:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c62b3104-3a17-4854-9db7-694bf7795c10", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "691fd831-115b-4881-b402-b4d5768a4f6a"}, {"timestamp": "2026-06-17T03:14:00.803Z", "date_only": false, "value": "2026-06-17T03:14:00.803", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35606", "record": "FKIE_CVE-2020-35606", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:07.686Z", "date_only": false, "value": "2026-09-01T17:01:07.686969Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2061", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "eaa2dd78-b16a-4db7-ac43-8e19cd81b22c", "url": "https://t.me/cissp/2061"}, {"timestamp": "2026-09-11T21:00:04.512Z", "date_only": false, "value": "2026-09-11T21:00:04.512089Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2061", "record": "CVE-2020-35606", "field": "creation_timestamp", "uuid": "05872e77-08ed-42d7-b6f0-d53fc7af8caf", "url": "https://t.me/cissp/2061"}]}