https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 19:49:01 +0000 https://db.gcve.eu/sighting/9fbf1807-67d9-4b39-b7c3-439669095c3d/export {"uuid": "9fbf1807-67d9-4b39-b7c3-439669095c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:51.000000Z"} {"uuid": "9fbf1807-67d9-4b39-b7c3-439669095c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:51.000000Z"} https://db.gcve.eu/sighting/9fbf1807-67d9-4b39-b7c3-439669095c3d/export Tue, 14 Oct 2025 10:31:51 +0000 https://db.gcve.eu/sighting/79045665-b3c6-427e-bf81-a3445c8dadbf/export {"uuid": "79045665-b3c6-427e-bf81-a3445c8dadbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/628", "content": "Netgear \u8def\u7531\u5668\nCVE-2020-27867 \n/setup.cgi?todo=funjsq_login&next_file=basic_wait.htm&funjsq_access_token=|\u547d\u4ee4", "creation_timestamp": "2023-10-21T17:25:47.000000Z"} {"uuid": "79045665-b3c6-427e-bf81-a3445c8dadbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/628", "content": "Netgear \u8def\u7531\u5668\nCVE-2020-27867 \n/setup.cgi?todo=funjsq_login&next_file=basic_wait.htm&funjsq_access_token=|\u547d\u4ee4", "creation_timestamp": "2023-10-21T17:25:47.000000Z"} https://db.gcve.eu/sighting/79045665-b3c6-427e-bf81-a3445c8dadbf/export Sat, 21 Oct 2023 17:25:47 +0000 https://db.gcve.eu/sighting/e23c30d1-bb31-4857-b405-80ca1d2808ca/export {"uuid": "e23c30d1-bb31-4857-b405-80ca1d2808ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6194", "content": "Netgear Orbi Wi-Fi mesh routers: reverse engineering, vulnerability hunting and n-day exploit\n\nPart 1: https://blog.coffinsec.com/research/2022/06/12/orbi-hunting-0-intro-uart.html\n\nPart 2: https://blog.coffinsec.com/research/2022/06/19/orbi-hunting-1-soap-api-crashes.html\n\nPart 3: https://blog.coffinsec.com/research/2022/07/02/orbi-nday-exploit-cve-2020-27861.html\n\n#embedded #iot #cybersecurity\n\nhttps://t.me/TheGrayHats\n\n#cybersec #infosec #hacking #hack #cybersecurity #hackers #grayhats", "creation_timestamp": "2023-08-14T19:34:11.000000Z"} {"uuid": "e23c30d1-bb31-4857-b405-80ca1d2808ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6194", "content": "Netgear Orbi Wi-Fi mesh routers: reverse engineering, vulnerability hunting and n-day exploit\n\nPart 1: https://blog.coffinsec.com/research/2022/06/12/orbi-hunting-0-intro-uart.html\n\nPart 2: https://blog.coffinsec.com/research/2022/06/19/orbi-hunting-1-soap-api-crashes.html\n\nPart 3: https://blog.coffinsec.com/research/2022/07/02/orbi-nday-exploit-cve-2020-27861.html\n\n#embedded #iot #cybersecurity\n\nhttps://t.me/TheGrayHats\n\n#cybersec #infosec #hacking #hack #cybersecurity #hackers #grayhats", "creation_timestamp": "2023-08-14T19:34:11.000000Z"} https://db.gcve.eu/sighting/e23c30d1-bb31-4857-b405-80ca1d2808ca/export Mon, 14 Aug 2023 19:34:11 +0000 https://db.gcve.eu/sighting/9c559fd4-3eb7-4fc5-b55d-2b3b755de6ca/export {"uuid": "9c559fd4-3eb7-4fc5-b55d-2b3b755de6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "https://t.me/crackcodes/796", "content": "Today's Update\n1. nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)\n2. Collection of Exploits, CVES(Unauthenticated) and Wordpress Scanners\n3. CVE-2022-24706 exploit\n4. Androguard Tool - Reverse engineering and pentesting of Android applications.\n5. Amsi-Bypass-Powershell Scripts\n6. Bug-Bounty-Tips\n7. nacs - Event-driven pentest scanner\n8. Malaysia locatefamily Data leak\n9. Jaeles \u2013 The Swiss Army knife for automated Web Application Testing\n10. D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife \u2013 Lateral movement using DCOM Objects\n11. Pak Military Garments Company Data dump Video\n12. CVE-2022-24342 - JetBrains TeamCity \u2013 account takeover via CSRF in GitHub authentication (PoC)\n\nLink:- https://forum.hackbyte.org", "creation_timestamp": "2022-07-05T14:02:24.000000Z"} {"uuid": "9c559fd4-3eb7-4fc5-b55d-2b3b755de6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "https://t.me/crackcodes/796", "content": "Today's Update\n1. nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)\n2. Collection of Exploits, CVES(Unauthenticated) and Wordpress Scanners\n3. CVE-2022-24706 exploit\n4. Androguard Tool - Reverse engineering and pentesting of Android applications.\n5. Amsi-Bypass-Powershell Scripts\n6. Bug-Bounty-Tips\n7. nacs - Event-driven pentest scanner\n8. Malaysia locatefamily Data leak\n9. Jaeles \u2013 The Swiss Army knife for automated Web Application Testing\n10. D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife \u2013 Lateral movement using DCOM Objects\n11. Pak Military Garments Company Data dump Video\n12. CVE-2022-24342 - JetBrains TeamCity \u2013 account takeover via CSRF in GitHub authentication (PoC)\n\nLink:- https://forum.hackbyte.org", "creation_timestamp": "2022-07-05T14:02:24.000000Z"} https://db.gcve.eu/sighting/9c559fd4-3eb7-4fc5-b55d-2b3b755de6ca/export Tue, 05 Jul 2022 14:02:24 +0000 https://db.gcve.eu/sighting/e20729c3-00aa-4a49-a33d-81b05523ac48/export {"uuid": "e20729c3-00aa-4a49-a33d-81b05523ac48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euD_m-0TzPewCA", "content": "", "creation_timestamp": "2022-07-05T06:24:51.000000Z"} {"uuid": "e20729c3-00aa-4a49-a33d-81b05523ac48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euD_m-0TzPewCA", "content": "", "creation_timestamp": "2022-07-05T06:24:51.000000Z"} https://db.gcve.eu/sighting/e20729c3-00aa-4a49-a33d-81b05523ac48/export Tue, 05 Jul 2022 06:24:51 +0000 https://db.gcve.eu/sighting/bb8644f6-21c8-4646-8290-79248f7b157f/export {"uuid": "bb8644f6-21c8-4646-8290-79248f7b157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "seen", "source": "https://t.me/cibsecurity/25827", "content": "\u203c CVE-2021-35973 \u203c\n\nNETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-30T18:31:54.000000Z"} {"uuid": "bb8644f6-21c8-4646-8290-79248f7b157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "seen", "source": "https://t.me/cibsecurity/25827", "content": "\u203c CVE-2021-35973 \u203c\n\nNETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-30T18:31:54.000000Z"} https://db.gcve.eu/sighting/bb8644f6-21c8-4646-8290-79248f7b157f/export Wed, 30 Jun 2021 18:31:54 +0000 https://db.gcve.eu/sighting/2a1966db-3b43-4173-8444-8be48c07d195/export {"uuid": "2a1966db-3b43-4173-8444-8be48c07d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2888", "content": "#WLAN_Security\n1. NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation (PoC)\nhttps://www.exploit-db.com/exploits/49634 \n2. CVE-2020-17409, CVE-2020-27866:\nNETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/3/11/the-battle-between-white-box-and-black-box-bug-hunting-in-wireless-routers", "creation_timestamp": "2021-03-17T13:30:07.000000Z"} {"uuid": "2a1966db-3b43-4173-8444-8be48c07d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2888", "content": "#WLAN_Security\n1. NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation (PoC)\nhttps://www.exploit-db.com/exploits/49634 \n2. CVE-2020-17409, CVE-2020-27866:\nNETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/3/11/the-battle-between-white-box-and-black-box-bug-hunting-in-wireless-routers", "creation_timestamp": "2021-03-17T13:30:07.000000Z"} https://db.gcve.eu/sighting/2a1966db-3b43-4173-8444-8be48c07d195/export Wed, 17 Mar 2021 13:30:07 +0000 https://db.gcve.eu/sighting/a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36/export {"uuid": "a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2565", "content": "#Threat_Research\nChaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform", "creation_timestamp": "2021-01-25T11:02:01.000000Z"} {"uuid": "a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2565", "content": "#Threat_Research\nChaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform", "creation_timestamp": "2021-01-25T11:02:01.000000Z"} https://db.gcve.eu/sighting/a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36/export Mon, 25 Jan 2021 11:02:01 +0000