{"metadata": {"vulnerability": "CVE-2020-9854", "count": 31, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 20}}, "data": [{"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-9854", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-22T00:00:00Z", "date_only": false, "value": "2020-10-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-10-22T17:54:06Z", "date_only": false, "value": "2020-10-22T17:54:06.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-9854", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-22T17:54:06Z", "date_only": false, "value": "2020-10-22T17:54:06.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2020-9854", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-22T18:15:00Z", "date_only": false, "value": "2020-10-22T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VGP2-4HHX-5VJW", "record": "GHSA-VGP2-4HHX-5VJW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-22T18:15:00Z", "date_only": false, "value": "2020-10-22T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-9854", "record": "GSD-2020-9854", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-22T18:15:13.910Z", "date_only": false, "value": "2020-10-22T18:15:13.910000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-10-22T18:15:13.910Z", "date_only": false, "value": "2020-10-22T18:15:13.910", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9854", "record": "FKIE_CVE-2020-9854", "field": "published"}, {"timestamp": "2020-10-28T00:00:00Z", "date_only": false, "value": "2020-10-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_update_date.data.1.date"}, {"timestamp": "2020-11-02T00:00:00Z", "date_only": true, "value": "2020-11-02", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-65946", "record": "CNVD-2020-65946", "field": "submitTime"}, {"timestamp": "2020-11-24T00:00:00Z", "date_only": true, "value": "2020-11-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-65946", "record": "CNVD-2020-65946", "field": "openTime"}, {"timestamp": "2021-01-28T00:00:00Z", "date_only": false, "value": "2021-01-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-01-28T08:11:00Z", "date_only": false, "value": "2021-01-28T08:11:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-10-27T03:11:44Z", "date_only": false, "value": "2021-10-27T03:11:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1540", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "8b0516c5-dc4a-4ca1-a672-2946891639c8", "content": "#exploit\nCVE-2020-9854:\n\"Unauthd\" (macOS user -> kernel escalation with SIP bypass, three logic bugs ftw) (PoC)\nhttps://objective-see.com/blog/blog_0x4D.html", "url": "https://t.me/CyberSecurityTechnologies/1540"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-24T17:32:03Z", "date_only": false, "value": "2022-05-24T17:32:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VGP2-4HHX-5VJW", "record": "GHSA-VGP2-4HHX-5VJW", "field": "published"}, {"timestamp": "2022-12-23T22:31:07Z", "date_only": false, "value": "2022-12-23T22:31:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/7411", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "0c5afd3b-84d4-4d51-b32e-0b7e7c8b7f22", "content": "#exploit\n1. CVE-2020-9854:\n\"Unauthd\" - three logic bugs ftw\nhttps://objective-see.org/blog/blog_0x4D.html\n\n2. CVE-2022-3875, CVE-2022-3876, CVE-2022-3877:\nVulnerabilities in Passwordstate\nhttps://www.modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html", "url": "https://t.me/CyberSecurityTechnologies/7411"}, {"timestamp": "2022-12-24T17:39:19Z", "date_only": false, "value": "2022-12-24T17:39:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/1979", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "4f71b630-8268-4ef0-98f6-9b14e73532c3", "content": "#exploit\n1. CVE-2020-9854:\n\"Unauthd\" - three logic bugs ftw\nhttps://objective-see.org/blog/blog_0x4D.html\n\n2. CVE-2022-3875, CVE-2022-3876, CVE-2022-3877:\nVulnerabilities in Passwordstate\nhttps://www.modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html", "url": "https://t.me/crackcodes/1979"}, {"timestamp": "2023-01-03T20:18:12Z", "date_only": false, "value": "2023-01-03T20:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2222", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "cec1841f-02ef-40d7-8dba-91c3e8fdb540", "content": "Cyber Security News - \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\nMeddler-in-the-Middle Phishing Attacks Explained\n\nhttps://unit42.paloaltonetworks.com/meddler-phishing-attacks\n\n\u200aOWASSRF \u2013 New Exploit Let Attacker Execute Remote Code on Microsoft Exchange Server\n\nhttps://gbhackers.com/owassrf/\n\n\u200b\u200bWindows Drivers Reverse Engineering Methodology\n\nThis blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers.\nIncluding a guide for setting up a lab for (the pesky) kernel debugging.\n\nhttps://voidsec.com/windows-drivers-reverse-engineering-methodology/\n\n\u200aGuide: Reporting Telnyx LLC spam\n\nhttps://latesthackingnews.com/2022/12/22/guide-reporting-telnyx-llc-spam/\n\n\u200aNetLlix - A Project Created With An Aim To Emulate And Test Exfiltration Of Data Over Different Network Protocols\n\nhttp://www.kitploit.com/2022/12/netllix-project-created-with-aim-to.html\n\n\u200aZoom Whiteboard patches XSS bug\n\nhttps://portswigger.net/daily-swig/zoom-whiteboard-patches-xss-bug\n\n\u200aBug bounty and AI: How machine learning is changing the game for cybersecurity\n\nhttps://blog.intigriti.com/2022/12/22/bug-bounty-and-ai-how-machine-learning-is-changing-the-game-for-cybersecurity/\n\n\u200aBlack Hat Europe 2022 NOC: The SOC Inside the NOC\n\nhttps://blogs.cisco.com/security/black-hat-europe-2022-noc-the-soc-inside-the-noc\n\nCVE-2020-9854: \"Unauthd\" - three logic bugs ftw\n\nhttps://objective-see.org/blog/blog_0x4D.html\n\nCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aLean, green coding machine: How sustainable computing drive can reduce attack surfaces\n\nhttps://portswigger.net/daily-swig/lean-green-coding-machine-how-sustainable-computing-drive-can-reduce-attack-surfaces\n\n\u200aBrave launches FrodoPIR, a privacy-focused database query system\n\nhttps://www.bleepingcomputer.com/news/security/brave-launches-frodopir-a-privacy-focused-database-query-system/\n\n\u200aHTTP Header Injection\n\nhttps://infosecwriteups.com/http-header-injection-4ba857fb9a16?source=rss----7b722bfd1b8d---4\n\n\u200aVice Society ransomware gang switches to new custom encryptor\n\nhttps://www.bleepingcomputer.com/news/security/vice-society-ransomware-gang-switches-to-new-custom-encryptor/\n\n\u200aComcast Xfinity accounts hacked in widespread 2FA bypass attacks\n\nhttps://www.bleepingcomputer.com/news/security/comcast-xfinity-accounts-hacked-in-widespread-2fa-bypass-attacks/\n\n\u200aInsiders worry CISA is too distracted from critical cyber mission\n\nhttps://www.cyberscoop.com/cisa-dhs-easterly-cyber-mission/\n\n\u200aDuckDuckGo now blocks Google sign-in pop-ups on all sites\n\nhttps://www.bleepingcomputer.com/news/security/duckduckgo-now-blocks-google-sign-in-pop-ups-on-all-sites/\n\n\u200aSoftware bills of material face long road to adoption\n\nhttps://www.cyberscoop.com/dhs-sbom-adoption/\n\n\u200aLastpass: Hackers stole customer vault data in cloud storage breach\n\nhttps://www.bleepingcomputer.com/news/security/lastpass-hackers-stole-customer-vault-data-in-cloud-storage-breach/\n\n\u200aLeading sports betting firm BetMGM discloses data breach\n\nhttps://www.bleepingcomputer.com/news/security/leading-sports-betting-firm-betmgm-discloses-data-breach/\n\n\u200aCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aPoC Code Published for Triggering RCE (CVE-2022-43571) in Splunk Enterprise\n\nhttps://securityonline.info/poc-code-published-for-triggering-rce-cve-2022-43571-in-splunk-enterprise/\n\n\u200aRaspberry Robin Malware Attacks Against Telecom and Government Sectors\n\nhttps://cybersecuritynews.com/raspberry-robin-malware/\n\n\u200aNew Zerobot Malware Exploiting Apache Vulnerabilities to Launch DDoS Attack\n\nhttps://cybersecuritynews.com/zerobot-malware/\n\n\u200aKmsdBot Botnet Leverages SSH to Compromise Systems and to Launch DDoS Attacks\n\nhttps://gbhackers.com/kmsdbot-ddos-botnet/\n\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/2222"}, {"timestamp": "2023-01-03T20:18:12Z", "date_only": false, "value": "2023-01-03T20:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/339", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "b7778851-5652-45f9-baa7-2d1270f41a69", "content": "Cyber Security News - \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\nMeddler-in-the-Middle Phishing Attacks Explained\n\nhttps://unit42.paloaltonetworks.com/meddler-phishing-attacks\n\n\u200aOWASSRF \u2013 New Exploit Let Attacker Execute Remote Code on Microsoft Exchange Server\n\nhttps://gbhackers.com/owassrf/\n\n\u200b\u200bWindows Drivers Reverse Engineering Methodology\n\nThis blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers.\nIncluding a guide for setting up a lab for (the pesky) kernel debugging.\n\nhttps://voidsec.com/windows-drivers-reverse-engineering-methodology/\n\n\u200aGuide: Reporting Telnyx LLC spam\n\nhttps://latesthackingnews.com/2022/12/22/guide-reporting-telnyx-llc-spam/\n\n\u200aNetLlix - A Project Created With An Aim To Emulate And Test Exfiltration Of Data Over Different Network Protocols\n\nhttp://www.kitploit.com/2022/12/netllix-project-created-with-aim-to.html\n\n\u200aZoom Whiteboard patches XSS bug\n\nhttps://portswigger.net/daily-swig/zoom-whiteboard-patches-xss-bug\n\n\u200aBug bounty and AI: How machine learning is changing the game for cybersecurity\n\nhttps://blog.intigriti.com/2022/12/22/bug-bounty-and-ai-how-machine-learning-is-changing-the-game-for-cybersecurity/\n\n\u200aBlack Hat Europe 2022 NOC: The SOC Inside the NOC\n\nhttps://blogs.cisco.com/security/black-hat-europe-2022-noc-the-soc-inside-the-noc\n\nCVE-2020-9854: \"Unauthd\" - three logic bugs ftw\n\nhttps://objective-see.org/blog/blog_0x4D.html\n\nCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aLean, green coding machine: How sustainable computing drive can reduce attack surfaces\n\nhttps://portswigger.net/daily-swig/lean-green-coding-machine-how-sustainable-computing-drive-can-reduce-attack-surfaces\n\n\u200aBrave launches FrodoPIR, a privacy-focused database query system\n\nhttps://www.bleepingcomputer.com/news/security/brave-launches-frodopir-a-privacy-focused-database-query-system/\n\n\u200aHTTP Header Injection\n\nhttps://infosecwriteups.com/http-header-injection-4ba857fb9a16?source=rss----7b722bfd1b8d---4\n\n\u200aVice Society ransomware gang switches to new custom encryptor\n\nhttps://www.bleepingcomputer.com/news/security/vice-society-ransomware-gang-switches-to-new-custom-encryptor/\n\n\u200aComcast Xfinity accounts hacked in widespread 2FA bypass attacks\n\nhttps://www.bleepingcomputer.com/news/security/comcast-xfinity-accounts-hacked-in-widespread-2fa-bypass-attacks/\n\n\u200aInsiders worry CISA is too distracted from critical cyber mission\n\nhttps://www.cyberscoop.com/cisa-dhs-easterly-cyber-mission/\n\n\u200aDuckDuckGo now blocks Google sign-in pop-ups on all sites\n\nhttps://www.bleepingcomputer.com/news/security/duckduckgo-now-blocks-google-sign-in-pop-ups-on-all-sites/\n\n\u200aSoftware bills of material face long road to adoption\n\nhttps://www.cyberscoop.com/dhs-sbom-adoption/\n\n\u200aLastpass: Hackers stole customer vault data in cloud storage breach\n\nhttps://www.bleepingcomputer.com/news/security/lastpass-hackers-stole-customer-vault-data-in-cloud-storage-breach/\n\n\u200aLeading sports betting firm BetMGM discloses data breach\n\nhttps://www.bleepingcomputer.com/news/security/leading-sports-betting-firm-betmgm-discloses-data-breach/\n\n\u200aCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aPoC Code Published for Triggering RCE (CVE-2022-43571) in Splunk Enterprise\n\nhttps://securityonline.info/poc-code-published-for-triggering-rce-cve-2022-43571-in-splunk-enterprise/\n\n\u200aRaspberry Robin Malware Attacks Against Telecom and Government Sectors\n\nhttps://cybersecuritynews.com/raspberry-robin-malware/\n\n\u200aNew Zerobot Malware Exploiting Apache Vulnerabilities to Launch DDoS Attack\n\nhttps://cybersecuritynews.com/zerobot-malware/\n\n\u200aKmsdBot Botnet Leverages SSH to Compromise Systems and to Launch DDoS Attacks\n\nhttps://gbhackers.com/kmsdbot-ddos-botnet/\n\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/339"}, {"timestamp": "2023-01-09T00:00:00Z", "date_only": false, "value": "2023-01-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-01-09T16:41:00Z", "date_only": false, "value": "2023-01-09T16:41Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-9854", "record": "GSD-2020-9854", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-09T18:30:24Z", "date_only": false, "value": "2023-01-09T18:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VGP2-4HHX-5VJW", "record": "GHSA-VGP2-4HHX-5VJW", "field": "modified"}, {"timestamp": "2023-12-13T01:21:53.165Z", "date_only": false, "value": "2023-12-13T01:21:53.165693Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-9854", "record": "GSD-2020-9854", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T10:43:05.359Z", "date_only": false, "value": "2024-08-04T10:43:05.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-9854", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T10:43:05.359Z", "date_only": false, "value": "2024-08-04T10:43:05.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-9854", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T05:41:24.903Z", "date_only": false, "value": "2024-11-21T05:41:24.903000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-11-23T20:59:47.863Z", "date_only": false, "value": "2024-11-23T20:59:47.863000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202010-1262", "record": "VAR-202010-1262", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:28:41.270Z", "date_only": false, "value": "2026-06-17T03:28:41.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9854", "record": "FKIE_CVE-2020-9854", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:15.081Z", "date_only": false, "value": "2026-09-01T17:01:15.081113Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/1054", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "4e34ee2c-21a9-4bdc-976c-47ea70b4f7c9", "url": "https://t.me/cissp/1054"}, {"timestamp": "2026-09-12T02:00:04.562Z", "date_only": false, "value": "2026-09-12T02:00:04.562518Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/1054", "record": "CVE-2020-9854", "field": "creation_timestamp", "uuid": "2291bc50-0230-4832-9d26-992ca4605f97", "url": "https://t.me/cissp/1054"}]}