{"vulnerability": "CVE-2020-2688", "sightings": [{"uuid": "62ec9f4d-cee0-439e-84cc-38be2d6979a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26886", "type": "seen", "source": "https://t.me/cibsecurity/25150", "content": "\u203c CVE-2020-26886 \u203c\n\nSoftaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores. This leads to privilege escalation on the local host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T23:37:30.000000Z"}, {"uuid": "46dde044-6987-4d8d-853e-6a2a7211bce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26887", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/611", "content": "CVE-2020-26887 DNS Rebinding Protection\u7e5e\u904e\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-26887_DNS_Rebinding_Protection%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-06T14:16:36.000000Z"}, {"uuid": "1f586ffc-bb4b-4d4f-8760-d364ffe8cf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26887", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1950", "content": "#exploit\n1. CVE-2020-26887:\nAVM FRITZ! Box 7490 Wi-Fi 11AC Router (<=7.20) and potentially others - DNS Rebinding Protection Bypass\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2020-003/-fritz-box-dns-rebinding-protection-bypass\n\n2. CVE-2020-25656:\nLinux 3.4 - 5.9 kernel concurrency UAF\nin vt_do_kdgkb_ioctl\nhttps://seclists.org/oss-sec/2020/q4/63", "creation_timestamp": "2022-06-09T03:15:17.000000Z"}, {"uuid": "26397d5b-1605-484f-ac24-ed3c2a2f59db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26880", "type": "seen", "source": "https://t.me/cibsecurity/15125", "content": "\u203c CVE-2020-26880 \u203c\n\nSympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf configuration file (which is owned by sympa) and parsing it through the setuid sympa_newaliases-wrapper executable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-07T22:29:24.000000Z"}, {"uuid": "9f7ef466-ccb8-44f7-a8e5-2e3756bef91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26882", "type": "seen", "source": "https://t.me/cibsecurity/15969", "content": "\u203c CVE-2020-26882 \u203c\n\nIn Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T16:50:49.000000Z"}, {"uuid": "6579a958-3b7c-4289-8026-2b2ea5bd9cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26883", "type": "seen", "source": "https://t.me/cibsecurity/15975", "content": "\u203c CVE-2020-26883 \u203c\n\nIn Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T16:50:55.000000Z"}]}