{"vulnerability": "CVE-2020-2719", "sightings": [{"uuid": "180ac899-4d8c-41af-b098-8bc52bb26cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27199", "type": "seen", "source": "MISP/adf22495-9b40-4f31-bdf3-95ab23e4fa67", "content": "", "creation_timestamp": "2024-11-14T06:08:13.000000Z"}, {"uuid": "0e9f1eaa-7b1b-438d-87d1-a65562cf8623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27195", "type": "published-proof-of-concept", "source": "Telegram/HXUTHUAaEbyzwhB6IT_MD2Io6GLwoFGkSLA9kTUH-mjSa3Q", "content": "", "creation_timestamp": "2020-10-22T08:28:04.000000Z"}, {"uuid": "3fcaf933-524e-427d-8839-f0bbdd440dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/2366", "content": "\u041d\u0430\u0431\u0440\u043e\u0441\u0430\u043b \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u043e\u0432 \u044f\u0434\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 coccinelle https://github.com/evdenis/cvehound\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442: \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u0443\u0441\u043a\u0438 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 CVE.\n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442: \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 CVE \u0432 \u044f\u0434\u0440\u0435 \u0435\u0441\u0442\u044c \u0448\u0430\u0431\u043b\u043e\u043d coccinelle/grep \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043b\u0438\u0431\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043a\u0430\u043a\u043e\u0439 \u0444\u0438\u043a\u0441 \u0432 \u043a\u043e\u0434\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043d\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0438\u0441\u043a \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \"\u043d\u0435\u0437\u0430\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0433\u043e\" \u043a\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430, \u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u043e: \u0435\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 (git), \u0442\u043e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, \u043c\u043e\u0436\u043d\u043e \u0438 \u043f\u043e \u043d\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u043d\u0430 \u0440\u0443\u043a\u0430\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0440\u0445\u0438\u0432 \u0441 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430\u043c\u0438, \u0442\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0430\u043a. \u041d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0435\u0441\u0442\u044c \u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043d\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0435\u0440 \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u0432\u044f\u0445, \u0438\u043d\u043e\u0433\u0434\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0438 \u0432\u044b\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u043a\u0430\u043a \u0430\u0440\u0445\u0438\u0432. \u041f\u0440\u0438\u043c\u0435\u0440 - \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0438 \u044f\u0434\u0435\u0440 \u0434\u043b\u044f samsung/huawei \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 (opensource.samsung.com)\n\n\u0427\u0442\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u0443\u043c\u0435\u0435\u0442: \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0448\u0430\u0431\u043b\u043e\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f ~30 CVE (\u0441\u043f\u0438\u0441\u043e\u043a https://github.com/evdenis/cvehound/tree/master/cvehound/cve). \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a ./cvehound --dir ~/linux, \u0433\u0434\u0435 ~/linux \u043f\u0443\u0442\u044c \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430\u043c \u044f\u0434\u0440\u0430. \u0415\u0441\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043e\u043f\u0446\u0438\u044e --verbose \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0447\u0442\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0438 \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0448\u0435\u043b \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0444\u0438\u043a\u0441\u0430. \u041e\u043f\u0446\u0438\u044f --cve CVE-2020-27194 CVE-2020-29371 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.", "creation_timestamp": "2020-12-24T14:24:19.000000Z"}, {"uuid": "03ba11cf-e797-4092-9b8f-93a8cb843c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "published-proof-of-concept", "source": "https://t.me/linkersec/17", "content": "The Linux eBPF verifier, the gift that keeps on giving\n\nAn LPE exploit for CVE-2020-27194.\n\nhttps://haxx.in/blasty-vs-ebpf.c", "creation_timestamp": "2021-02-14T19:23:51.000000Z"}, {"uuid": "a7523136-75f2-45ac-8e79-5c7224512ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "published-proof-of-concept", "source": "https://t.me/linkersec/47", "content": "Exploit for CVE-2020-27194\n\nSimon Scannell published an exploit for the eBPF JIT bug he had previously found via fuzzing.\n\nExploit: https://github.com/scannells/exploits/tree/master/CVE-2020-27194\nArticle: https://scannell.me/fuzzing-for-ebpf-jit-bugs-in-the-linux-kernel/", "creation_timestamp": "2021-01-05T01:42:23.000000Z"}, {"uuid": "101efc1f-124d-4144-81f7-db0b209f1cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "seen", "source": "Telegram/TXmZ8EBGvdc4uufvEqu6hfgyjEc7K_gjD1Jpp8Uzvu6-KK0", "content": "", "creation_timestamp": "2023-03-23T09:18:19.000000Z"}, {"uuid": "b6d401a8-a3ef-4cf5-809f-890194988e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1427", "content": "kernel-linux-factory\n*\n\u0423\u0434\u043e\u0431\u043d\u043e \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u0433\u043b\u044f\u043d\u0443\u043b \u043a\u0430\u043a\u043e\u0435 \u044f\u0434\u0440\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u043f\u043b\u043e\u0435\u0442, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u043e \u043c\u043e\u0440\u0434\u0435 #root\n*\n\u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 exploits \u0434\u043b\u044f:\nCVE-2016-9793\n4-20-BPF-integer\nCVE-2017-5123\nCVE-2017-6074\nCVE-2017-7308\nCVE-2017-8890\nCVE-2017-11176\nCVE-2017-16995\nCVE-2017-1000112\nCVE-2018-5333\nCVE-2019-9213 & CVE-2019-8956\nCVE-2019-15666\nCVE-2020-8835\nCVE-2020-27194\nCVE-2021-3156\nCVE-2021-31440\nCVE-2021-3490\nCVE-2021-22555\nCVE-2021-41073\nCVE-2021-4154\nCVE-2021-42008\nCVE-2021-43267\nCVE-2022-0185\nCVE-2022-0847\nCVE-2022-0995\nCVE-2022-1015\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-25636\nCVE-2022-27666\nCVE-2022-32250\nCVE-2022-34918\n\ndownload\n\n#linux #exploits #kernel", "creation_timestamp": "2023-03-23T06:30:43.000000Z"}, {"uuid": "ac4f3dfe-58d9-48ad-9209-f6d8932ee07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27199", "type": "seen", "source": "https://t.me/cibsecurity/20978", "content": "\u203c CVE-2020-27199 \u203c\n\nThe Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for correct password to gain access to the mobile application as that victim user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-17T07:42:28.000000Z"}, {"uuid": "abf8cfed-ebff-425b-aeaf-175daa01ac24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27199", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2963", "content": "#exploit\nCVE-2020-27199:\nMagic Home Pro - Authentication Bypass\nhttps://9lyph.github.io/CVE-2020-27199", "creation_timestamp": "2022-07-04T21:03:00.000000Z"}, {"uuid": "2302f6d1-24f5-4c19-bb98-a5cb0cdd9d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27194", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2036", "content": "#Fuzzing\nFuzzing for eBPF JIT bugs in the Linux kernel\n(+ vulnerability breakdown of CVE-2020-27194\n- LPE PoC for Ubuntu 20.10)\nhttps://scannell.me/fuzzing-for-ebpf-jit-bugs-in-the-linux-kernel/", "creation_timestamp": "2022-07-12T13:02:09.000000Z"}, {"uuid": "d3df96e3-0a07-4a27-9d4b-692112d8d466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27192", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2095", "content": "#exploit\n1. CVE-2020-13958:\nApache OpenOffice 4 <=4.1.7 - RCE\nhttps://github.com/irsl/apache-openoffice-rce-via-uno-links\n\n2. CVE-2020-15349, CVE-2020-27192:\nForklift <=3.3.9, <=3.4 - LPE on macOS\nhttps://insinuator.net/2020/11/forklift-lpe", "creation_timestamp": "2023-04-23T12:57:57.000000Z"}, {"uuid": "275f5012-eddb-469b-9c15-a4f9a93b9d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27195", "type": "seen", "source": "https://t.me/cibsecurity/15529", "content": "\u203c CVE-2020-27195 \u203c\n\nHashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-22T20:52:26.000000Z"}, {"uuid": "68101787-f091-44e5-abd4-a41e393ea470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27191", "type": "seen", "source": "https://t.me/cibsecurity/16366", "content": "\u203c CVE-2020-27191 \u203c\n\nLionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-16T18:37:53.000000Z"}, {"uuid": "916af3fe-b56b-4fd0-9dfa-c0ff1f744654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27197", "type": "seen", "source": "https://t.me/cibsecurity/15358", "content": "\u203c CVE-2020-27197 \u203c\n\n** DISPUTED ** TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is used for the XML parser. NOTE: the vendor points out that the parse method \"wraps the lxml library\" and that this may be an issue to \"raise ... to the lxml group.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-18T00:43:48.000000Z"}, {"uuid": "ac1ec290-db3c-4614-a398-3bed0498a6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27192", "type": "seen", "source": "https://t.me/cibsecurity/16424", "content": "\u203c CVE-2020-27192 \u203c\n\nBinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges through ForkLift's helper tool.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T07:38:28.000000Z"}, {"uuid": "4bdb280c-9d5f-451d-a0b3-e31c19f7c301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27196", "type": "seen", "source": "https://t.me/cibsecurity/15974", "content": "\u203c CVE-2020-27196 \u203c\n\nAn issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a StackOverflowError and Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T16:50:54.000000Z"}, {"uuid": "1243616e-d049-4da4-ae81-3fce66634839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27193", "type": "seen", "source": "https://t.me/cibsecurity/16278", "content": "\u203c CVE-2020-27193 \u203c\n\nA cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-13T00:31:15.000000Z"}]}