{"vulnerability": "CVE-2020-2769", "sightings": [{"uuid": "290228a4-8e7a-4fc5-b9d9-a2a4d198bdde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27697", "type": "seen", "source": "https://t.me/cibsecurity/17390", "content": "\u203c CVE-2020-27697 \u203c\n\nTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative privileges during the installation of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T06:25:12.000000Z"}, {"uuid": "3f29848d-321c-49cc-bff7-3c55fdcbe5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27694", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2051", "content": "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) ver. prior to 9.1.0 - CSRF/XML Injection/SSRF/File Disclosure (PoC)(CVE-2020-27016, CVE-2020-27017, CVE-2020-27018, CVE-2020-27019, CVE-2020-27693, CVE-2020-27694)\nhttps://packetstormsecurity.com/files/159914/SA-20201104-0.txt", "creation_timestamp": "2020-11-06T12:36:01.000000Z"}, {"uuid": "aae25a93-3cef-41ce-b7c0-fd2dd5f89eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27693", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2051", "content": "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) ver. prior to 9.1.0 - CSRF/XML Injection/SSRF/File Disclosure (PoC)(CVE-2020-27016, CVE-2020-27017, CVE-2020-27018, CVE-2020-27019, CVE-2020-27693, CVE-2020-27694)\nhttps://packetstormsecurity.com/files/159914/SA-20201104-0.txt", "creation_timestamp": "2020-11-06T12:36:01.000000Z"}, {"uuid": "32c0a5a6-ddcf-4cc3-b80f-538b6522314c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27697", "type": "seen", "source": "https://t.me/cibsecurity/16556", "content": "\u203c CVE-2020-27697 \u203c\n\nTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative privileges during the installation of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T22:40:49.000000Z"}, {"uuid": "92479437-1b84-4b11-8406-bdea9f84810b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27691", "type": "seen", "source": "https://t.me/cibsecurity/15848", "content": "\u203c CVE-2020-27691 \u203c\n\nThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-05T00:42:43.000000Z"}, {"uuid": "06e53c9d-71e4-440c-a8f6-078285c47be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27692", "type": "seen", "source": "https://t.me/cibsecurity/15849", "content": "\u203c CVE-2020-27692 \u203c\n\nThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings (responsible for managing devices remotely). This makes it possible to remotely reboot the device or upload malicious firmware.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-05T00:42:44.000000Z"}, {"uuid": "42fe5373-5f73-41cc-ba1f-a09baedc088d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27690", "type": "seen", "source": "https://t.me/cibsecurity/15851", "content": "\u203c CVE-2020-27690 \u203c\n\nThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-05T00:42:46.000000Z"}, {"uuid": "15e661d0-b06d-4f85-9f39-8eed34d2c30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27695", "type": "seen", "source": "https://t.me/cibsecurity/16546", "content": "\u203c CVE-2020-27695 \u203c\n\nTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrative privileges during the installation of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T22:40:37.000000Z"}, {"uuid": "9a6db014-4b4d-4057-992f-a8f159964523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27696", "type": "seen", "source": "https://t.me/cibsecurity/16547", "content": "\u203c CVE-2020-27696 \u203c\n\nTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrative privileges during the installation of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T22:40:38.000000Z"}]}