{"vulnerability": "CVE-2020-1832", "sightings": [{"uuid": "5f49b576-df61-4f57-8e0e-82aec5ebb0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18327", "type": "seen", "source": "https://gist.github.com/basraznov/31ddfd27a5c4ff9ca75f8eb532a8153e", "content": "", "creation_timestamp": "2025-07-23T04:26:29.000000Z"}, {"uuid": "714646a9-4226-4f82-971b-194402310445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18329", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10059", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-18329\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-02T13:28:33.697Z\n\ud83d\udd17 References:\n1. https://medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-carel-pcoweb-514c148ae694\n2. https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md", "creation_timestamp": "2025-04-02T13:33:27.000000Z"}, {"uuid": "3db48964-8812-4205-b35f-26b070d8d9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18326", "type": "seen", "source": "https://t.me/cibsecurity/38434", "content": "\u203c CVE-2020-18326 \u203c\n\nCross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-04T18:27:12.000000Z"}, {"uuid": "91816ca6-7ecb-4668-a340-a69484de5e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18325", "type": "seen", "source": "https://t.me/cibsecurity/38433", "content": "\u203c CVE-2020-18325 \u203c\n\nMultilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-04T18:27:11.000000Z"}, {"uuid": "aab2d43e-8312-4525-87a2-159f67bc89a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18324", "type": "seen", "source": "https://t.me/cibsecurity/38427", "content": "\u203c CVE-2020-18324 \u203c\n\nCross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-04T18:27:02.000000Z"}, {"uuid": "22bdb7f5-a932-45ff-837f-852fe2cbeef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-18327", "type": "seen", "source": "https://t.me/cibsecurity/38422", "content": "\u203c CVE-2020-18327 \u203c\n\nCross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-04T18:26:55.000000Z"}]}