{"vulnerability": "CVE-2020-2786", "sightings": [{"uuid": "9fbf1807-67d9-4b39-b7c3-439669095c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:51.000000Z"}, {"uuid": "e20729c3-00aa-4a49-a33d-81b05523ac48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euD_m-0TzPewCA", "content": "", "creation_timestamp": "2022-07-05T06:24:51.000000Z"}, {"uuid": "e23c30d1-bb31-4857-b405-80ca1d2808ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6194", "content": "Netgear Orbi Wi-Fi mesh routers: reverse engineering, vulnerability hunting and n-day exploit\n\nPart 1: https://blog.coffinsec.com/research/2022/06/12/orbi-hunting-0-intro-uart.html\n\nPart 2: https://blog.coffinsec.com/research/2022/06/19/orbi-hunting-1-soap-api-crashes.html\n\nPart 3: https://blog.coffinsec.com/research/2022/07/02/orbi-nday-exploit-cve-2020-27861.html\n\n#embedded #iot #cybersecurity\n\nhttps://t.me/TheGrayHats\n\n#cybersec #infosec #hacking #hack #cybersecurity #hackers #grayhats", "creation_timestamp": "2023-08-14T19:34:11.000000Z"}, {"uuid": "9c559fd4-3eb7-4fc5-b55d-2b3b755de6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27861", "type": "seen", "source": "https://t.me/crackcodes/796", "content": "Today's Update\n1. nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)\n2. Collection of Exploits, CVES(Unauthenticated) and Wordpress Scanners\n3. CVE-2022-24706 exploit\n4. Androguard Tool - Reverse engineering and pentesting of Android applications.\n5. Amsi-Bypass-Powershell Scripts\n6. Bug-Bounty-Tips\n7. nacs - Event-driven pentest scanner\n8. Malaysia locatefamily Data leak\n9. Jaeles \u2013 The Swiss Army knife for automated Web Application Testing\n10. D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife \u2013 Lateral movement using DCOM Objects\n11. Pak Military Garments Company Data dump Video\n12. CVE-2022-24342 - JetBrains TeamCity \u2013 account takeover via CSRF in GitHub authentication (PoC)\n\nLink:- https://forum.hackbyte.org", "creation_timestamp": "2022-07-05T14:02:24.000000Z"}, {"uuid": "bb8644f6-21c8-4646-8290-79248f7b157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "seen", "source": "https://t.me/cibsecurity/25827", "content": "\u203c CVE-2021-35973 \u203c\n\nNETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows the attacker to change the web UI password, and eventually to enable debug mode (telnetd) and gain a shell on the device as the admin limited-user account (however, escalation to root is simple because of weak permissions on the /etc/ directory).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-30T18:31:54.000000Z"}, {"uuid": "79045665-b3c6-427e-bf81-a3445c8dadbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27867", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/628", "content": "Netgear \u8def\u7531\u5668\nCVE-2020-27867 \n/setup.cgi?todo=funjsq_login&next_file=basic_wait.htm&funjsq_access_token=|\u547d\u4ee4", "creation_timestamp": "2023-10-21T17:25:47.000000Z"}, {"uuid": "a5ef5fce-fe0e-4b1d-9ef0-4728d68d8e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27869", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2565", "content": "#Threat_Research\nChaining Multiple Bugs (CVE-2020-14005, CVE-2020-27869, CVE-2020-10148) for unauthenticated RCE in the SolarWinds Orion Platform (PoCs)\nhttps://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform", "creation_timestamp": "2021-01-25T11:02:01.000000Z"}, {"uuid": "2a1966db-3b43-4173-8444-8be48c07d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2888", "content": "#WLAN_Security\n1. NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation (PoC)\nhttps://www.exploit-db.com/exploits/49634 \n2. CVE-2020-17409, CVE-2020-27866:\nNETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/3/11/the-battle-between-white-box-and-black-box-bug-hunting-in-wireless-routers", "creation_timestamp": "2021-03-17T13:30:07.000000Z"}]}