{"metadata": {"vulnerability": "cve-2020-9289", "count": 31, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 22}}, "data": [{"timestamp": "2020-02-19T00:00:00Z", "date_only": false, "value": "2020-02-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-9289", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-06-12T00:00:00Z", "date_only": false, "value": "2020-06-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": true, "value": "2020-06-15", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-33243", "record": "CNVD-2020-33243", "field": "openTime"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": true, "value": "2020-06-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-33243", "record": "CNVD-2020-33243", "field": "submitTime"}, {"timestamp": "2020-06-16T00:00:00Z", "date_only": false, "value": "2020-06-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-06-16T20:12:40Z", "date_only": false, "value": "2020-06-16T20:12:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-9289", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-06-16T21:15:00Z", "date_only": false, "value": "2020-06-16T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8832-M7JX-C7WV", "record": "GHSA-8832-M7JX-C7WV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-06-16T21:15:00Z", "date_only": false, "value": "2020-06-16T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-9289", "record": "GSD-2020-9289", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-06-16T21:15:11.470Z", "date_only": false, "value": "2020-06-16T21:15:11.470000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-06-16T21:15:11.470Z", "date_only": false, "value": "2020-06-16T21:15:11.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9289", "record": "FKIE_CVE-2020-9289", "field": "published"}, {"timestamp": "2020-07-22T00:00:00Z", "date_only": false, "value": "2020-07-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_update_date.data.2.date"}, {"timestamp": "2020-07-24T22:33:52Z", "date_only": false, "value": "2020-07-24T22:33:52.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "cve-2020-9289", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-07-27T00:00:00Z", "date_only": false, "value": "2020-07-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-24T17:20:41Z", "date_only": false, "value": "2022-05-24T17:20:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8832-M7JX-C7WV", "record": "GHSA-8832-M7JX-C7WV", "field": "published"}, {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-10-06T23:59:00Z", "date_only": false, "value": "2022-10-06T23:59Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-9289", "record": "GSD-2020-9289", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-10-07T00:00:39Z", "date_only": false, "value": "2022-10-07T00:00:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8832-M7JX-C7WV", "record": "GHSA-8832-M7JX-C7WV", "field": "modified"}, {"timestamp": "2023-06-30T15:51:30Z", "date_only": false, "value": "2023-06-30T15:51:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3780", "record": "CVE-2020-9289", "field": "creation_timestamp", "uuid": "e678dff3-458e-4ef1-9827-080a30dcfd9e", "content": "\ud83d\udd10DATALEAKS:\n\n\ud83d\udcccSocial Security Administration USA (SSA.gov) Leak : https://www.system32.ink/2023/06/social-security-administration-usa.html\n\n\ud83d\udcccElectrical4all (electrical4all.co.uk) UK Data Leak : https://www.system32.ink/2023/06/electrical4all-electrical4allcouk-uk.html\n\n\ud83d\udcccAuraXR (Mexican 'extended reality' company) DATA Leak : https://www.system32.ink/2023/06/auraxr-mexican-extended-reality-company.html\n\n\ud83d\udcccQWERT SYSTEM (South Korean POS systems) Leak : https://www.system32.ink/2023/06/qwert-system-south-korean-pos-systems.html\n\n\ud83d\udcccTelstra MyRewards (Australian rewards/coupon service) Data Leak : https://www.system32.ink/2023/06/telstra-myrewards-australian.html\n\n\ud83d\udcccDoctorAki (Colombian health website) Data Leak : https://www.system32.ink/2023/06/doctoraki-colombian-health-website-data.html\n\n\ud83d\udcccNovaPay data leak : https://www.system32.ink/2023/06/novapay-data-leak.html\n\n\ud83d\udccc3S Castle Real Estate (3skalegayrimenkul.com.tr) Data Leak : https://www.system32.ink/2023/06/3s-castle-real-estate.html\n\n\ud83e\uddeeExploits: \n\n\ud83d\udcccCVE-2023-34843 POC Traggo/server : https://www.system32.ink/2023/06/cve-2023-34843-poc-traggoserver.html\n\n\ud83d\udcccCVE-2023-2982 Exploit WordPress Social Login and Register Plugin : https://www.system32.ink/2023/06/cve-2023-2982-exploit-wordpress-social.html\n\n\ud83d\udee0Tools:\n\n\ud83d\udcccATSCAN SCANNER - Advanced dork Search &amp; Mass Exploit Scanner : https://www.system32.ink/2023/06/atscan-scanner-advanced-dork-search.html\n\n\ud83d\udcccDecrypt FortiManager configuration secrets (CVE-2020-9289) : https://www.system32.ink/2023/06/decrypt-fortimanager-configuration.html\n\n\ud83d\udcccNoMoreCookies - Browser Protector against various Stealers : https://www.system32.ink/2023/06/nomorecookies-browser-protector-against.html\n\n\ud83d\udc00RAT:\n\n\ud83d\udcccEverspy v1.1 Rat : https://www.system32.ink/2023/06/everspy-v11-rat-cracked-download.html\n\n\ud83e\udee5SCAMPAGE:\n\n\ud83d\udcccBellco Credit Union Scampage : https://www.system32.ink/2023/06/bellco-credit-union-phishing-page.html", "url": "https://t.me/crackcodes/3780"}, {"timestamp": "2023-07-01T09:06:39Z", "date_only": false, "value": "2023-07-01T09:06:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rQMVu4dwJRh1-j8AkvL2ouV19FMmA1TDUkwtOokmEHAkfA", "record": "CVE-2020-9289", "field": "creation_timestamp", "uuid": "0eb04d58-fc48-4b6a-bc31-12a5e5e042d2"}, {"timestamp": "2023-07-06T11:08:24Z", "date_only": false, "value": "2023-07-06T11:08:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3103", "record": "CVE-2020-9289", "field": "creation_timestamp", "uuid": "e82838e8-497c-494a-9a2d-fa69d68a1943", "content": "Tools \ud83d\udd27 \ud83d\udd28 \ud83d\udd27  - Hackers Factory \n\n\u200b\u200bNosey Parker\n\nA command-line program that finds secrets and sensitive information in textual data and Git history.\n\nhttps://github.com/praetorian-inc/noseyparker\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200b\ud83d\udee1 eBPFShield\n\nA high-performance security tool that utilizes eBPF and Python to provide real-time IP-Intelligence and DNS monitoring. \n\nhttps://github.com/sagarbhure/eBPFShield\n\n#cybersecurity #infosec\n\n\u200b\u200bNetSoc #OSINT\n\nTool focused on extracting information from an account in various Social Networks.\n\nhttps://github.com/XDeadHackerX/NetSoc_OSINT\n\n#cybersecurity #infosec\n\n\u200b\u200bcloudtoolkit\n\nCloud Penetration Testing Toolkit\n\nhttps://github.com/404tk/cloudtoolkit\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bTomcatBackdoorPoC\n\nTomcat backdoor based on CS blog.\n\nhttps://github.com/HackingLZ/TomcatBackdoorPoC\n\nDetails:\nhttps://bit.ly/437Myhb\n\n#infosec #pentesting #redteam\n\n\u200b\u200bNoMoreCookies\n\nBrowser Protector against various stealers, written in C# &amp; C/C++. Works by hooking NtCreateFile and prevent accessing browser files, in addition to prevent it's unhooking. compatible with various games and software.\n\nhttps://github.com/AdvDebug/NoMoreCookies\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-28252\n\nUnderstanding the cve-2022-37969 windows common log file system driver local privilege escalation.\n\nhttps://github.com/fortra/CVE-2023-28252\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-2982\n\nWordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) &lt;= 7.6.4 - Authentication Bypass.\n\nhttps://github.com/RandomRobbieBF/CVE-2023-2982\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-3338\n\nPracticing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled.\n\nhttps://github.com/TurtleARM/CVE-2023-3338\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2020-9289\n\nDecrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with CVE-2019-6693 is the encryption routine).\n\nhttps://github.com/synacktiv/CVE-2020-9289\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bPDFator\n\nInfoSec project that consists of a Python script and a C application to generate an executable payload. The payload includes functionality to write and execute a PDF file and execute shellcode. Both the PDF file and shellcode are encrypted using XOR and decrypted at runtime.\n\nhttps://github.com/smokeme/PDFator\n\n#cybersecurity #infosec\n\n\u200b\u200bUscrapper \n\n#OSINT tool that allows users to extract various personal information from a website. It leverages web scraping techniques and regular expressions to extract email addresses, social media links, author names, geolocations, phone numbers, and usernames from both hyperlinked and non-hyperlinked sources on the webpage.\n\nhttps://github.com/z0m31en7/Uscrapper\n\n#cybersecurity #infosec\n\n\u200b\u200bGold Digger\n\nA simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test.\n\nhttps://github.com/ustayready/golddigger\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bLinux-Exploit-Detection\n\nLinux-based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Rego/Sigma.\n\nhttps://github.com/Loginsoft-Research/Linux-Exploit-Detection\n\n#cybersecurity #infosec\n\n\u200b\u200bdynmx \n\nSignature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces.\n\nhttps://github.com/0x534a/dynmx\n\n#cybersecurity #infosec\n\n\u200b\u200bjsluice\n\nExtract URLs, paths, secrets, and other interesting bits from JavaScript.\n\nhttps://github.com/BishopFox/jsluice\n\n#infosec #pentesting #bugbounty\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3103"}, {"timestamp": "2023-07-15T04:02:00Z", "date_only": false, "value": "2023-07-15T04:02:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FQgTqgAsC1BzgFQ3QhqXo3ZwrqpxzvjIHl33wB4sG5coLAQ", "record": "CVE-2020-9289", "field": "creation_timestamp", "uuid": "4e811d54-c181-4c36-a39a-373513723ef1"}, {"timestamp": "2023-08-16T06:30:09Z", "date_only": false, "value": "2023-08-16T06:30:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/827", "record": "CVE-2020-9289", "field": "creation_timestamp", "uuid": "0e5aa55e-797f-472e-93c2-c3c17dd4e57c", "content": "Decrypt FortiManager configuration secrets ( CVE-2020-9289 &amp; CVE-2019-6693 )\nRepo : https://github.com/synacktiv/CVE-2020-9289", "url": "https://t.me/MrVGunz/827"}, {"timestamp": "2023-12-13T01:21:53.115Z", "date_only": false, "value": "2023-12-13T01:21:53.115945Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-9289", "record": "GSD-2020-9289", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T10:26:16.066Z", "date_only": false, "value": "2024-08-04T10:26:16.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-9289", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T20:09:48.822Z", "date_only": false, "value": "2024-10-24T20:09:48.822151Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-9289", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-24T20:09:48.822Z", "date_only": false, "value": "2024-10-24T20:09:48.822151Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9289", "record": "FKIE_CVE-2020-9289", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-25T14:25:10.790Z", "date_only": false, "value": "2024-10-25T14:25:10.790Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-9289", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-25T14:25:10.790Z", "date_only": false, "value": "2024-10-25T14:25:10.790Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-9289", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T05:40:21.903Z", "date_only": false, "value": "2024-11-21T05:40:21.903000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-11-23T22:41:18.397Z", "date_only": false, "value": "2024-11-23T22:41:18.397000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202006-1549", "record": "VAR-202006-1549", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:27:42.643Z", "date_only": false, "value": "2026-06-17T03:27:42.643", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9289", "record": "FKIE_CVE-2020-9289", "field": "lastModified"}]}
